Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7/73f86739-7ec4-3cd5-9612-15bb20013a70.roa
File: 73f86739-7ec4-3cd5-9612-15bb20013a70.roa (raw, json)
Hash identifier: XEQqU1oYcJ06EABTfdRAZzzfO/twefFh8fmRWe+NXgA=
Subject key identifier: 9E:1D:B7:62:5A:A3:BD:F1:FD:30:4C:FB:C4:EC:2A:93:1C:A2:14:F7
Certificate issuer: /CN=146f7542-8c7a-4e73-af53-f7523053a1b7
Certificate serial: 010D0C9F432858490021695B3AE8C97B35F6DD90
Authority key identifier: 72:4A:D3:6D:57:6E:A4:4A:0F:CB:51:BB:0A:71:0C:A3:F6:F4:FF:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7/73f86739-7ec4-3cd5-9612-15bb20013a70.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 36363
IP address blocks: 199.19.156.0/22 maxlen: 22
205.153.116.0/22 maxlen: 22
2605:5b40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:69:5b:3a:e8:c9:7b:35:f6:dd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146f7542-8c7a-4e73-af53-f7523053a1b7
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=0535b936-c8d4-41b7-82ff-1d09c2b11edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:b7:0f:22:82:98:cd:1c:1d:e2:16:b2:b7:
96:b2:a2:d3:36:c4:f4:85:40:d2:ca:8f:2f:85:97:
0b:a9:26:ad:d7:b9:0f:07:93:88:69:e1:f2:f9:a3:
98:e5:a2:74:cf:9a:08:29:6b:3d:66:15:87:7f:7b:
06:07:ac:86:09:04:af:14:60:84:d9:ad:eb:b3:11:
b7:60:8c:4e:20:0a:ef:a8:4f:2c:7a:cf:b8:b0:b7:
3a:87:c5:af:f7:85:fa:14:8f:f1:51:a9:b1:b3:3a:
c0:ce:cb:e6:ca:4e:fa:37:68:66:13:13:6a:07:e0:
a5:e2:05:69:ad:9e:33:62:89:5f:90:20:05:14:1c:
90:93:09:7f:fb:7f:5d:6b:7c:e5:87:94:36:61:d8:
b6:f2:e9:38:d6:52:a1:79:4d:37:aa:f3:49:16:7a:
fa:0b:c2:f5:0e:a1:42:4b:99:88:9c:89:0f:43:96:
71:c7:d2:a2:c9:29:82:e7:62:0a:87:d7:34:36:3d:
dd:2c:46:0a:97:93:e3:0d:6c:8a:f5:07:f7:06:75:
6b:18:95:46:6b:54:39:1e:4c:f5:31:94:85:49:28:
a2:44:cf:c1:87:9a:35:10:25:6b:6d:21:8a:d4:f7:
3a:3f:57:a9:a1:1a:08:8a:85:5b:80:b0:c5:09:36:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1D:B7:62:5A:A3:BD:F1:FD:30:4C:FB:C4:EC:2A:93:1C:A2:14:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7/73f86739-7ec4-3cd5-9612-15bb20013a70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7/146f7542-8c7a-4e73-af53-f7523053a1b7.crl
X509v3 Authority Key Identifier:
keyid:72:4A:D3:6D:57:6E:A4:4A:0F:CB:51:BB:0A:71:0C:A3:F6:F4:FF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7.cer
sbgp-ipAddrBlock: critical
IPv4:
199.19.156.0/22
205.153.116.0/22
IPv6:
2605:5b40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:98:58:46:2d:8c:48:c6:72:d1:fe:b2:76:e1:7e:04:23:b8:
7e:e3:a8:c3:ee:62:1b:1a:a2:db:db:4d:08:a9:d3:79:f4:c4:
de:f1:37:92:89:29:70:9e:0b:ca:24:96:f9:28:ab:72:92:38:
d4:e2:21:ed:67:59:2d:c6:1d:b5:db:26:13:c9:82:f6:38:e2:
9a:db:10:c0:26:05:5a:26:1e:cf:85:d8:6a:da:06:8e:88:50:
f6:2b:ab:9b:67:6b:b6:b9:6c:a3:71:96:2c:3a:83:9b:51:9f:
5f:f1:24:ae:62:da:5f:6d:6b:18:4d:15:29:1b:c6:17:85:2c:
fb:3b:5e:b7:69:94:e4:fe:70:08:22:81:71:b6:6a:24:74:82:
d6:41:6d:96:6e:58:26:ec:3f:39:cc:4e:3d:f8:63:22:2c:5c:
a1:fc:3d:c0:07:e4:b5:14:1c:a7:44:fc:3f:99:ae:0f:3d:c7:
aa:7a:dd:3c:58:8e:25:35:4a:07:9a:d1:8b:06:fc:07:ec:6a:
74:92:3b:aa:08:32:af:d3:aa:15:c2:3f:9c:6b:e1:86:14:0d:
38:13:20:f2:a8:66:62:a9:e0:c9:16:7c:0a:79:45:54:f5:7d:
18:71:38:e7:48:44:ff:c5:56:77:f9:40:bd:16:3f:a5:2a:ee:
07:27:21:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:15 2025 by rpki-client