Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a72a154-b2c7-3d7b-bb66-2c5925369786.roa
File: 2a72a154-b2c7-3d7b-bb66-2c5925369786.roa (raw, json)
Hash identifier: pwULl5mq2C7pWl7NKzmwcWyh/80sb0ccEMumhwmt65M=
Subject key identifier: A7:BF:CE:69:CC:D7:F8:BA:FA:6C:D6:26:D5:B7:CD:9E:0E:8B:32:F6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F768BAE721B89E8D6902D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a72a154-b2c7-3d7b-bb66-2c5925369786.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 76.28.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:68:ba:e7:21:b8:9e:8d:69:02:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=12c3d557-a72f-4a83-9b83-6b4ec553b2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:13:57:2d:7c:b1:74:7a:a0:00:a4:62:b8:f4:
1e:b1:31:16:9f:b2:bc:b9:ed:5b:35:f0:d7:d2:52:
9f:72:f5:eb:8b:bc:c7:fb:28:42:31:28:92:5a:89:
9f:9b:b6:bb:d0:eb:98:e5:4a:d3:13:d0:b2:d2:c4:
2f:48:be:8a:c3:bb:a2:f8:69:77:36:0a:5c:a2:d2:
77:75:70:90:ee:8b:6f:29:70:ec:a2:5c:80:eb:16:
0c:74:cb:65:12:2d:69:aa:b6:6d:26:4d:c1:97:38:
ca:b7:7e:d1:52:24:2f:1c:13:21:21:a3:e5:9e:4b:
88:97:68:d4:98:2a:52:f8:c5:01:19:70:14:bc:32:
df:2e:28:fb:3d:61:d3:ab:85:e9:e3:02:39:e9:4d:
00:51:c5:76:44:28:8f:ee:21:c9:74:da:c5:98:8c:
ab:e0:bf:b1:33:41:c6:1a:e2:6a:d4:40:4d:13:7e:
86:22:21:ff:21:67:a7:12:0d:e8:95:35:f9:4a:28:
7d:9b:b1:25:cb:74:f8:75:d0:9b:77:70:68:0d:c5:
45:45:bf:90:cc:df:c0:98:fa:b7:3e:10:13:f3:02:
9f:96:cf:b1:9f:e1:54:51:74:2a:33:e7:c6:57:30:
ed:75:06:19:b6:7f:e1:9c:b3:23:25:6e:82:78:df:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BF:CE:69:CC:D7:F8:BA:FA:6C:D6:26:D5:B7:CD:9E:0E:8B:32:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a72a154-b2c7-3d7b-bb66-2c5925369786.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.28.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:60:15:ff:6e:e2:bc:d6:16:b5:bb:68:7c:97:45:e9:b1:5f:
9b:7d:ff:5b:9a:f0:03:47:f5:48:a7:29:b5:99:ae:fd:af:da:
76:8d:d5:6e:d5:32:0c:1e:4f:e2:56:a9:21:5b:04:70:b4:ab:
ca:dd:3e:95:c3:90:53:7b:f6:ff:ef:58:59:f4:b6:d0:df:95:
4b:65:eb:ac:ff:79:d8:45:0c:6b:a1:43:40:6f:11:80:b5:51:
7c:0f:51:38:56:50:88:0c:1d:d7:6e:90:0a:eb:60:eb:aa:95:
99:b3:f7:1e:ed:49:21:00:67:d6:c0:a1:11:ae:1b:4d:9f:fc:
c0:68:85:03:bc:e8:98:b3:8d:d3:d5:0a:b4:6f:29:d0:79:b3:
32:9b:be:61:8e:b9:a0:e3:82:ba:74:61:4d:5e:b9:bc:be:cf:
0c:ff:3e:ed:ab:a8:20:f3:ac:4d:2d:b5:42:b5:27:8e:ca:88:
59:fd:c5:6c:1b:3b:88:57:47:25:ae:a8:72:15:2c:9f:06:b8:
1b:52:47:75:de:2c:6b:e7:4f:f5:76:92:c1:9c:22:69:1e:2e:
a0:03:11:2d:35:a0:25:ae:cb:37:6c:61:8a:76:cc:2f:a7:7f:
21:da:a7:e9:a2:24:56:95:f7:05:74:74:39:df:30:2c:a0:f2:
aa:16:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:01 2025 by rpki-client