Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41dc1fc-d782-3496-b496-85c57b6abfa5.roa
File: a41dc1fc-d782-3496-b496-85c57b6abfa5.roa (raw, json)
Hash identifier: mZ0ZjB33ardG2xExEKxWnB4K3gvdNzxXxR7T/dh7J1s=
Subject key identifier: C5:AF:04:C4:50:6D:12:EB:9F:CC:52:4F:93:AF:C4:D1:90:1D:2C:F2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F73919FECB4E966F7F7700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41dc1fc-d782-3496-b496-85c57b6abfa5.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 73.219.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:39:19:fe:cb:4e:96:6f:7f:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d4f218c3-5788-48c8-bb0a-7adbc5d5e8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:9d:2c:0c:4f:c7:1f:d1:1b:a4:ef:91:f3:
16:e9:b1:c6:b4:b9:2d:3e:cb:75:4e:bd:55:3f:6b:
1b:86:d7:0f:a5:22:d7:48:93:ef:d5:dd:14:45:cd:
7c:54:a3:f3:7e:1d:dc:b3:80:d1:9e:68:32:17:53:
c7:3b:70:50:0c:77:8e:76:a8:6a:31:68:2e:6c:e2:
0b:4e:23:2b:95:e6:51:8c:3a:47:39:30:5e:c4:d6:
59:cc:32:1b:0c:93:7f:49:28:19:3f:2a:73:81:29:
45:eb:19:d5:fb:98:89:5d:65:1a:7a:3c:95:8a:97:
55:0d:1c:70:0a:6f:c9:34:4e:dd:8c:eb:43:01:52:
b9:f0:d0:ac:86:77:e1:8b:0d:0e:e6:77:00:c5:b6:
11:23:38:59:ab:0e:ef:fe:9c:17:65:3e:2c:fe:82:
fb:5d:e7:15:e5:66:f2:cf:b2:1b:f1:27:80:bb:6f:
f4:ea:09:33:46:9a:60:d3:5a:63:b1:2a:89:32:a9:
07:ba:8a:81:4f:86:86:86:ef:bb:08:cb:e0:74:86:
ed:d0:e0:36:2d:4e:44:62:f6:54:ee:a5:e8:81:bb:
31:ee:18:19:54:35:d2:1f:85:d3:57:35:4f:9d:e8:
ce:08:b1:fa:12:e2:1b:5b:02:bf:76:57:6c:4a:57:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AF:04:C4:50:6D:12:EB:9F:CC:52:4F:93:AF:C4:D1:90:1D:2C:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41dc1fc-d782-3496-b496-85c57b6abfa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.219.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:77:d5:b1:af:bf:01:8b:70:da:2f:e5:85:93:48:7d:ea:23:
c7:0c:a4:c8:26:7b:67:1a:35:75:35:97:6a:24:75:85:f5:26:
5e:84:c3:81:d5:10:82:a0:6c:a8:a8:df:68:92:99:23:2a:5b:
cf:f6:57:d2:a8:70:09:42:0a:c0:ae:eb:59:2a:5d:c1:d9:4b:
d0:57:2c:f0:16:42:e1:d8:2d:bc:00:cc:ae:03:1e:70:8d:0e:
9c:cb:09:a6:7d:66:34:e9:80:07:d3:d5:d4:c4:9f:cc:b7:fd:
c6:f0:b0:48:b7:66:41:e4:63:54:e1:62:75:99:b1:e5:93:64:
c4:06:29:fc:0e:d9:e3:28:b0:b0:80:7d:b2:f5:c6:1d:1b:e6:
10:77:ea:a3:85:ad:6a:e2:d3:39:b4:d7:d7:db:52:22:6f:e4:
6a:51:58:07:11:e7:b1:6a:5a:96:d7:bf:9e:a0:74:a4:5e:0f:
03:90:10:a3:7c:38:76:1d:8c:47:e4:e5:c1:fe:bb:c0:83:4f:
1e:f6:5f:6f:40:f1:4a:36:ff:66:d7:0f:81:22:a2:11:3c:48:
4b:92:83:fa:2d:4b:9e:13:bd:60:f4:73:89:aa:be:5a:5b:a7:
90:6b:57:18:4f:43:3e:1f:da:5d:b0:96:78:4a:0b:20:ab:ae:
69:e2:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:01:33 2025 by rpki-client on console.sobornost.net