Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d358435-b11d-3319-a24c-548095eb331c.roa
File: 3d358435-b11d-3319-a24c-548095eb331c.roa (raw, json)
Hash identifier: HmvzfycdDQPvh+cxRCtswmDhVfWgibs0ehVHqejydDA=
Subject key identifier: 34:EB:B2:DA:EC:A1:ED:64:BA:2A:B2:44:54:37:1E:2B:D0:47:B3:F6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CAA2E5B83A45FDDBD9B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d358435-b11d-3319-a24c-548095eb331c.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33657
IP address blocks: 76.96.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:aa:2e:5b:83:a4:5f:dd:bd:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=7124b159-45a0-4d92-80c1-f32fb7c1a2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:8c:d3:e2:eb:19:0c:dd:ab:14:da:55:f7:
86:50:a7:42:3b:37:94:67:ed:24:58:44:ca:32:62:
d0:f7:8f:af:cb:f3:4b:5c:e2:c5:9a:a9:22:63:c2:
f7:0f:47:9a:97:95:e0:3c:ac:02:da:a4:d3:28:e0:
58:c8:95:ec:ed:fb:75:df:34:86:39:4c:03:ee:a4:
d1:67:54:07:e5:e1:13:78:2f:48:0f:c9:cd:4d:71:
cb:2e:10:64:d9:1d:3b:ae:d4:f5:40:6a:7b:15:bc:
ca:ea:95:c9:c9:44:ec:05:d8:35:f1:0f:4e:e1:33:
3b:15:bc:d0:59:1e:1d:1b:b5:3d:21:fe:b1:d3:fa:
db:3f:fa:a0:98:c7:0e:5b:8a:60:eb:56:d9:54:00:
94:83:60:f1:2b:44:df:a3:b2:a4:b6:5d:5b:ef:d6:
a6:d5:e1:54:f5:8a:18:e8:5a:21:bf:a3:00:d3:78:
34:d1:38:1b:e9:45:09:53:59:d4:e9:01:29:d5:a4:
44:07:ec:0d:04:61:2c:33:d5:fc:7e:cc:ab:77:59:
9b:a5:a6:ae:63:94:e8:43:f5:4c:d9:47:b1:93:c2:
6d:5a:9c:d9:ec:b4:63:24:66:e7:75:e0:70:71:7c:
22:b4:e3:ba:ae:f6:46:cb:e7:6a:0c:67:52:7c:c6:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EB:B2:DA:EC:A1:ED:64:BA:2A:B2:44:54:37:1E:2B:D0:47:B3:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d358435-b11d-3319-a24c-548095eb331c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.96.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:58:ef:0f:9e:82:68:24:82:83:a0:c8:f7:34:13:4d:84:1f:
19:61:a7:c4:41:24:73:30:66:14:2e:fe:fe:24:b1:0a:49:7c:
a2:87:c7:dd:53:90:41:70:9c:7f:3a:46:d3:d3:b1:47:7a:f6:
e8:fb:40:6a:5c:68:f3:45:67:6d:2c:83:a3:4c:51:bf:56:f7:
54:0a:ee:6c:dc:90:5a:79:b9:f2:7a:04:04:7f:37:0d:44:5f:
60:2d:5d:4b:25:26:97:0b:40:73:4d:1e:84:1e:b7:23:77:40:
1a:94:53:f0:da:5d:90:de:2d:50:5e:d6:e7:2f:74:77:d3:f6:
1e:a7:43:9a:45:83:a1:02:05:5d:5b:95:d7:fc:18:29:d5:a1:
90:fd:e3:66:af:46:84:9e:29:53:af:f0:15:39:78:31:9c:86:
4d:67:93:63:0a:a7:f7:45:69:0c:48:d7:af:71:ff:9e:34:e1:
05:9b:47:93:79:43:d9:99:69:4b:75:d1:c8:d4:b1:c1:51:6c:
71:5c:24:86:07:02:65:43:39:fe:da:b0:ee:c6:f1:d1:66:6b:
41:6f:a9:bc:ea:f8:db:b4:bd:5f:1e:34:4b:2a:98:0f:73:8a:
59:93:7c:bd:b5:7c:b7:a6:6b:dd:76:39:69:57:25:3f:65:7e:
84:b2:9e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:02:55 2025 by rpki-client