Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4370cf6e-5783-3376-87a6-aeddcd49523c.roa
File: 4370cf6e-5783-3376-87a6-aeddcd49523c.roa (raw, json)
Hash identifier: 2r2x81DWjw8Vxvy4/1Zk61gWRUOEwOLN4wbxR7w8/2I=
Subject key identifier: C7:54:D2:8A:B5:F7:67:29:C1:E8:CE:6F:15:46:78:57:07:67:1B:D5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C600732F39A83F2F20430
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4370cf6e-5783-3376-87a6-aeddcd49523c.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 76.17.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:60:07:32:f3:9a:83:f2:f2:04:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=9fa16e21-2273-4d30-b728-c471c82d377b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:1c:3f:f9:c3:9b:7a:e4:b3:eb:f1:4d:97:
ce:60:f2:03:5d:13:c2:a1:b7:f0:df:f7:a1:dc:d3:
03:d8:ca:8e:33:20:38:d1:87:f1:89:98:6b:5c:e1:
a2:7a:3f:c5:60:7d:e7:c6:19:ff:b5:2f:24:42:df:
88:86:55:f2:05:0c:94:1c:83:bb:cd:85:b6:da:17:
4f:ce:da:7c:87:db:4e:f8:9b:4c:1b:bd:2e:da:47:
79:a7:7b:8b:b6:e1:6b:c9:85:ed:b6:a8:67:7d:47:
b2:1d:78:53:e1:e6:d3:5b:08:69:e2:ce:27:66:52:
f3:a4:f9:c8:5b:af:6d:09:9f:ef:c0:11:ef:ee:e8:
ee:46:8e:d5:78:2b:ca:0c:a5:5e:44:62:8a:f6:07:
e9:1a:af:2c:92:fb:33:92:29:2b:d6:69:5a:1d:19:
13:71:9b:79:6f:21:1c:12:bf:ce:29:da:f2:27:91:
e4:7e:1b:17:c3:6d:2c:17:f8:93:3d:65:91:62:45:
b6:8e:ad:87:d5:ec:02:07:e5:15:11:24:79:c6:9e:
fb:00:a9:4e:33:83:57:d4:aa:1c:f9:cb:8e:1d:4f:
58:34:7f:2c:b7:fd:e3:ff:0c:f5:3f:ea:21:1c:4f:
63:19:97:43:79:b4:b7:2d:35:6b:73:50:8c:13:e7:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:54:D2:8A:B5:F7:67:29:C1:E8:CE:6F:15:46:78:57:07:67:1B:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4370cf6e-5783-3376-87a6-aeddcd49523c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.17.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:dd:4f:35:d5:8b:79:33:4a:dc:3b:06:06:71:78:aa:0c:57:
20:95:84:02:ec:5f:8c:0b:7e:9a:39:c3:54:2a:15:8d:6a:b5:
53:c2:f9:90:59:7c:ba:dc:34:76:7d:b6:d1:38:71:dc:54:d3:
37:19:c4:a1:ee:ed:73:10:96:98:db:d2:0f:00:f4:cd:5b:95:
01:7e:89:7a:80:3b:92:26:97:13:ff:05:30:27:92:a4:84:d6:
57:29:99:60:36:7f:41:e4:cc:ba:4e:68:35:c2:3d:b3:f5:b3:
19:a4:1b:32:06:13:d3:94:13:cc:a4:1d:40:48:72:40:38:e7:
1f:0c:8c:ff:ed:62:62:14:9b:87:25:1d:65:b8:aa:08:ab:a7:
46:c4:82:3c:e0:ed:dd:4f:d3:f7:e0:88:5f:6d:dd:b4:33:c8:
70:91:11:ed:31:ba:0f:c9:43:75:c3:97:a4:15:dc:b5:ca:89:
83:e7:6d:26:8f:01:aa:f9:b5:e0:58:2e:72:00:fe:64:8b:10:
30:a5:56:40:e3:6a:04:fe:99:ec:17:bd:bf:bf:9a:18:70:dd:
16:ab:19:ae:b6:29:24:53:56:7b:ee:e5:1c:73:16:64:5c:ef:
2e:84:98:bc:59:c0:2b:49:f4:34:19:23:9d:c5:31:1a:a9:03:
e3:5e:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:14:55 2025 by rpki-client