Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f563605f-29cc-339d-a94b-42681dc2d424.roa
File: f563605f-29cc-339d-a94b-42681dc2d424.roa (raw, json)
Hash identifier: kYN9raLqVzrSOCekK7Mnk8XA7EnCb2LY/Ux5AW+rli4=
Subject key identifier: 43:01:FC:7A:0C:41:E8:BA:8F:D4:CC:74:13:90:F2:6A:B4:57:F0:AC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CF8E44953745801F95500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f563605f-29cc-339d-a94b-42681dc2d424.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 73.108.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:f8:e4:49:53:74:58:01:f9:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=70a3bc24-3c26-4919-93d9-2ab5f0634e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:f5:98:3a:48:77:f9:15:d5:39:ae:14:26:
57:c8:bd:64:24:7b:42:7e:76:fd:f8:3a:be:25:71:
64:38:4b:a9:2e:49:17:b1:b4:c2:d7:4c:f1:85:8f:
53:a1:56:99:3e:9a:3c:59:d8:73:67:c9:53:e6:f7:
06:f4:e4:c5:8c:b5:81:45:e5:b0:97:bb:cc:23:8b:
24:b3:58:90:26:24:8b:f9:65:8a:62:2e:30:5d:b1:
75:1f:66:9d:bd:05:a1:c6:d0:5b:92:7d:20:5e:be:
ff:67:93:6d:ed:e7:27:ce:c9:34:dd:8b:2b:83:dd:
9e:aa:ec:b0:c0:a4:0f:18:63:e1:ac:ac:87:6c:f1:
b5:c4:2b:fd:03:ec:7c:4e:4f:62:22:02:14:f5:89:
f1:49:73:94:70:a7:5e:99:6c:d7:6e:95:9d:5e:95:
bf:dc:c6:76:4d:4c:d7:85:e3:4a:4d:a5:17:66:2d:
36:01:92:cc:80:d4:d1:96:e4:16:f0:f9:11:5a:5a:
a2:55:bb:f6:56:bf:64:8e:70:55:5c:f4:ae:9f:ef:
9c:07:5c:88:69:fe:db:4c:d7:53:14:3f:ea:7d:20:
84:70:0f:ce:1c:a0:95:c1:31:db:8b:e9:43:0b:b3:
e1:8f:72:c6:83:23:ea:76:54:f1:ea:10:86:0c:64:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:01:FC:7A:0C:41:E8:BA:8F:D4:CC:74:13:90:F2:6A:B4:57:F0:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f563605f-29cc-339d-a94b-42681dc2d424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.108.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:5b:ff:2e:c8:5e:8a:2f:25:78:6a:c9:4a:20:89:04:58:bd:
1a:83:ee:06:64:cf:d1:23:e5:93:d0:92:8b:ae:a0:1f:54:ed:
3e:a9:41:06:82:d2:c6:a2:3e:98:b7:42:78:b4:05:fc:ed:d7:
6f:b7:fd:f9:90:d8:54:84:e8:bf:b3:50:21:83:91:f5:34:58:
a8:d7:03:46:d8:2b:5c:aa:4b:ac:bd:2c:dd:de:ca:63:d5:41:
e4:01:7a:79:78:15:db:6c:b4:73:c6:b2:0d:fc:3c:5a:55:77:
9d:bd:76:22:53:78:5c:25:ec:45:57:d6:cd:58:95:c1:ed:66:
f6:f3:56:94:2b:d8:aa:04:21:8d:2f:3b:fb:b5:0e:c2:36:f7:
5b:f1:cd:31:2d:60:0a:86:9a:eb:bf:41:7f:96:44:d2:5f:73:
b6:46:7a:1d:d4:5c:7d:b6:56:e7:00:40:ad:0d:42:35:16:6b:
1f:ed:a2:50:f7:b6:5a:e9:ee:07:3a:f0:70:53:f5:43:d6:80:
b4:97:96:87:ff:b7:d0:21:14:88:8f:2b:83:dd:63:89:30:20:
d3:c9:f3:c4:63:b5:c8:a2:47:8a:46:7a:a3:0c:37:2b:a5:02:
2c:c4:be:ac:2b:ab:e0:79:6c:20:b3:f9:33:dd:25:cf:e8:16:
4b:d4:12:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:41:55 2025 by rpki-client