Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/045c2a5b-6df7-30be-bea8-785eaadae0a3.roa
File: 045c2a5b-6df7-30be-bea8-785eaadae0a3.roa (raw, json)
Hash identifier: x2/40GsyiEZ0468XI8nbGN3fH9ZGfg5W5xO9O4q7wB4=
Subject key identifier: BB:53:DE:6A:D4:B1:0A:0E:1D:8D:12:EE:77:F5:D5:9E:3E:88:45:74
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B99904BB92E337FF27980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/045c2a5b-6df7-30be-bea8-785eaadae0a3.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 76.129.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:99:90:4b:b9:2e:33:7f:f2:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=77a15eee-a568-4cc4-90fc-72f0205c268a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cd:4c:10:3a:ad:9f:92:60:17:57:6b:5b:a4:
3b:22:0d:b5:78:81:59:66:24:d3:4c:66:ac:26:32:
8f:8c:3f:d3:8b:96:3b:94:a2:57:0b:96:7d:04:67:
b8:16:94:c4:bb:4e:4f:da:80:99:af:ac:8b:91:74:
ae:72:4c:3b:5b:07:f0:d4:a3:56:d7:8a:86:56:f3:
48:07:1a:56:f6:d1:76:c7:f7:f5:87:00:c9:a0:61:
6c:ef:dc:3e:a4:50:d9:51:b3:64:ba:7e:79:cf:30:
45:d5:df:2e:05:ba:42:b4:62:e6:d9:05:69:c9:ed:
65:6a:ba:e0:7c:5e:12:23:b3:c8:10:56:b8:65:98:
c4:9d:7c:73:fa:0c:19:81:41:a8:b2:97:01:4f:80:
fc:54:f3:8f:5a:6d:20:73:b7:4c:f3:83:9a:b2:5a:
3e:ac:b9:5e:b7:7a:67:fd:e3:b3:5c:91:1f:24:41:
b5:4a:36:bd:85:e2:f7:b5:86:dc:3d:8b:ba:55:63:
cf:a3:35:46:67:66:17:45:42:e3:19:9d:d9:c5:25:
26:29:ca:90:0f:93:8d:1a:fb:40:71:90:a0:0e:26:
55:60:27:27:c8:58:9c:5e:ea:c2:a1:a6:5d:a3:4a:
3a:19:47:b4:00:39:9a:eb:63:c4:46:8a:d4:df:0b:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:DE:6A:D4:B1:0A:0E:1D:8D:12:EE:77:F5:D5:9E:3E:88:45:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/045c2a5b-6df7-30be-bea8-785eaadae0a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.129.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:bc:43:eb:3b:7e:72:57:33:8f:f0:3c:2c:b1:79:31:dd:d1:
ae:ad:a6:0f:01:e7:53:dd:b4:31:f3:2d:2b:2d:2e:0a:44:3c:
63:c7:13:96:e4:6e:27:2e:8f:59:9a:4a:55:9c:e2:46:0f:21:
bd:d1:3a:63:e5:87:5c:92:02:b2:6b:ab:01:37:38:03:3d:0d:
92:ba:1d:20:dd:4b:8b:9a:41:c4:ba:27:b4:07:55:3c:76:da:
c6:9d:b4:be:d3:a9:05:f2:5d:f2:bd:ee:af:ae:3e:5b:ab:1b:
d5:ec:68:8e:e1:27:a7:dc:37:9e:0e:80:31:45:5a:63:ce:78:
a2:36:42:3e:dc:54:5d:32:5d:1d:25:cc:f4:d7:b2:f1:02:fb:
6f:41:79:48:1d:7e:5c:5e:8c:56:0f:5d:d0:6f:8d:4f:ba:3a:
e0:32:b4:4b:32:8d:92:da:ba:e8:d9:21:ad:12:c8:14:dd:a3:
e0:f8:9d:78:47:4c:ca:2f:b1:b1:8d:ae:20:0c:26:97:45:6b:
3f:99:d5:5f:72:45:7a:f4:fd:27:87:8a:fd:6e:d8:3e:d6:31:
87:f9:1e:06:b9:7a:f5:c6:cc:9d:8c:69:1b:4a:0d:e7:11:34:
df:aa:70:6c:a9:c8:df:70:c4:94:33:ba:c5:97:8d:73:25:32:
2c:f8:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:33 2025 by rpki-client