Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2592170c-ee07-3eb1-93c9-d29d7e837008.roa
File: 2592170c-ee07-3eb1-93c9-d29d7e837008.roa (raw, json)
Hash identifier: be9M2RmHZjorZvlC5PjwbRguWoAd8k8LOywNTVJxCpg=
Subject key identifier: 42:60:C3:C7:42:B9:10:F0:87:3E:EA:5D:43:2A:44:E1:31:38:4F:BD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D02FB638134D31E454880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2592170c-ee07-3eb1-93c9-d29d7e837008.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 76.114.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:02:fb:63:81:34:d3:1e:45:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=1394e228-f730-49b4-b600-27450a8bfa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:e0:50:d1:26:e6:f3:8a:f5:10:69:bc:ac:
dd:ee:68:85:e3:d3:d5:9f:5a:95:93:75:97:75:5e:
eb:84:e1:5f:06:7e:f7:a0:4c:96:74:db:1c:bf:e8:
96:92:7b:5f:ef:48:51:16:1c:79:ba:76:12:b5:c0:
26:4b:d9:c8:6d:dc:8e:55:56:91:19:31:66:d6:34:
5d:f0:72:14:bc:75:f1:fe:fc:b5:29:61:da:25:f5:
54:8d:5d:cc:29:77:a5:3c:99:be:f1:a5:cb:d5:c1:
70:b3:4e:f5:84:5f:28:a8:bf:be:48:9d:0d:07:d6:
c9:ff:e4:e8:72:74:b5:15:b1:66:71:18:67:8f:55:
09:af:4e:29:dc:7b:71:f5:e9:34:ed:a2:98:36:b5:
b3:6a:d8:e5:23:f3:92:8a:c1:c6:56:f2:0a:87:56:
b5:cc:a8:c8:49:03:c5:a6:eb:d5:d1:6c:26:c3:1c:
75:3c:0d:75:d4:2b:e5:92:18:a4:ac:75:32:c7:4f:
53:2c:71:56:63:ef:89:8c:49:ff:e2:d1:fb:53:f0:
13:b1:75:27:04:eb:5c:ef:d4:66:d5:b9:8f:c6:4b:
a6:d2:c0:5c:0e:dc:d6:ee:24:3d:07:e7:05:d6:bc:
99:b3:10:10:4d:1a:40:0b:51:24:45:2c:ac:fb:17:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:60:C3:C7:42:B9:10:F0:87:3E:EA:5D:43:2A:44:E1:31:38:4F:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2592170c-ee07-3eb1-93c9-d29d7e837008.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.114.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:14:e8:7f:78:ef:ca:e3:3b:ad:9f:5c:27:b9:3e:f3:91:6f:
3a:b5:ed:5e:8c:7a:ae:b3:e9:71:74:38:d4:b3:05:44:ca:6d:
60:3e:48:b5:c9:f6:78:1d:48:75:61:f7:71:a1:2a:7a:a8:93:
d3:fa:da:a3:4e:53:0a:d3:9d:65:13:01:60:3f:c1:b0:44:83:
ca:62:1d:d2:4f:b1:75:9d:bb:86:84:0c:d8:71:9f:bc:fe:79:
52:85:8e:4d:1d:1e:8e:f0:44:d7:8c:76:a9:73:de:24:c5:c3:
35:d4:c3:40:73:64:67:c8:ce:3f:5e:ae:88:97:a6:cf:1f:c2:
cc:fa:f4:dd:e1:0c:6e:6e:ee:f2:9b:c9:fe:70:ba:2a:97:c0:
8d:f4:22:ed:db:db:f3:bb:a7:86:2c:9e:cd:08:30:fa:08:f5:
a5:c3:71:22:3e:41:c6:a7:f1:f5:08:55:39:8f:8c:ab:11:29:
cd:42:dc:7d:4a:81:3f:b2:a4:b1:f3:8c:a3:dc:2e:21:e1:cb:
4c:c5:9c:2f:ce:11:83:47:11:47:04:b6:5b:36:bd:96:c4:9e:
12:78:4a:8b:1e:44:04:93:e6:2c:21:d6:86:11:d1:c5:2a:17:
0f:fb:08:4e:2d:6c:5c:57:1b:91:a3:7b:51:b4:f2:49:a3:d0:
b5:62:e7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:51:24 2025 by rpki-client