Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eac98c3-5c7f-3c91-8abd-6be9d3f88328.roa
File: 3eac98c3-5c7f-3c91-8abd-6be9d3f88328.roa (raw, json)
Hash identifier: lqUMyr2fKK0roUbLChRGCQNXuw1vXc+g9NqW5CQ7X0M=
Subject key identifier: 47:F6:AF:44:B6:42:85:13:9E:3F:EC:51:A7:1C:C6:20:00:F0:A9:82
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F844C7E50FCEC7069E0FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eac98c3-5c7f-3c91-8abd-6be9d3f88328.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 76.105.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:44:c7:e5:0f:ce:c7:06:9e:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=7da3ca85-3471-442c-b1ee-d229b5797a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:ee:55:75:19:c2:9d:8e:8d:cd:ba:2f:ff:
40:76:3c:80:a4:69:79:62:02:1b:9a:a2:9f:15:8b:
35:58:d8:ce:21:62:2d:26:c0:ca:b1:33:10:9f:ce:
aa:9e:a1:6d:96:33:33:08:3a:39:4f:5d:00:d9:f4:
04:d7:0f:2d:32:f9:df:77:d5:a8:b7:98:47:3e:b4:
3a:a9:b0:dc:95:81:c9:64:10:cd:ae:fb:1a:a5:f3:
a7:16:85:4c:22:90:04:7c:fc:c4:88:d0:49:e0:63:
5b:01:e1:6e:d1:29:d7:1d:fd:0a:33:ea:3a:ec:7e:
c7:40:b1:2f:6d:2e:0c:bf:43:14:7e:e5:ad:df:5f:
e8:21:10:fe:bd:0f:84:68:32:10:62:6c:8d:74:37:
9a:18:d3:a1:38:fd:9d:c5:5c:02:f8:d7:8d:ae:c1:
46:45:a8:66:e3:06:d0:3a:d1:0b:3e:3d:15:f2:33:
20:91:55:14:2b:6b:36:20:9a:08:2d:25:0f:e6:72:
1a:17:f3:39:4f:b1:34:51:e7:20:89:fe:b2:ef:0b:
64:41:c8:58:7a:f2:58:22:2c:a0:72:e0:2a:11:a9:
cd:e3:9e:ad:fe:06:98:ab:84:cf:5c:9e:8f:d6:18:
60:2b:1a:00:aa:1a:4c:fc:bd:16:49:f7:70:59:ac:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F6:AF:44:B6:42:85:13:9E:3F:EC:51:A7:1C:C6:20:00:F0:A9:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eac98c3-5c7f-3c91-8abd-6be9d3f88328.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.105.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:07:13:c9:09:67:78:85:b7:0e:f8:4f:1d:59:47:39:8b:4b:
c5:05:1d:2e:6b:50:61:60:dc:de:92:fd:39:13:8c:24:97:cf:
f2:23:16:d0:2c:3a:d6:23:a9:59:25:af:5a:fe:e7:9a:ed:3d:
40:22:cb:36:1f:05:ed:4f:32:e9:57:74:61:e1:27:02:2f:a6:
c5:7b:81:45:74:3f:26:35:58:37:b9:22:a2:2a:a9:7a:a2:f1:
2c:83:3f:cf:08:93:31:ce:70:4f:31:90:49:4c:4a:88:88:f0:
42:69:72:cd:68:f5:14:35:99:8a:fc:a2:b8:bd:46:56:c2:22:
8c:88:77:67:72:90:ee:36:41:c0:00:1d:22:cd:b0:5f:0c:25:
a6:ea:1f:d5:0b:00:64:ab:7f:ff:f7:5a:98:4a:55:af:05:7a:
33:7b:3c:71:2b:da:fa:f1:a4:7f:54:a4:1f:32:61:b4:93:bb:
b6:d3:04:0f:82:22:ee:c9:50:59:13:0b:2e:03:03:01:c0:aa:
20:9d:dc:c5:fe:1a:ec:30:22:0e:df:66:c3:e8:0c:01:19:04:
a8:28:e3:4d:06:7a:ff:19:db:78:08:6d:e6:9b:9b:74:59:23:
6a:a0:15:9b:b3:cf:eb:d3:7a:9e:55:d9:3d:7d:fc:e8:c9:46:
85:35:30:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:19:33 2025 by rpki-client