Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/439c78a9-d46e-3763-9015-de203a8aa6a2.roa
File: 439c78a9-d46e-3763-9015-de203a8aa6a2.roa (raw, json)
Hash identifier: 0YHWqKeM7N/oIrre5XW3UpRvmcrJEfuPnEbq6hPuFpc=
Subject key identifier: 38:68:44:12:C3:3F:DB:04:4E:74:FB:32:FB:26:D9:0E:F8:96:A7:D6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D02EF7A78BB4B0190D500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/439c78a9-d46e-3763-9015-de203a8aa6a2.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 76.114.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:02:ef:7a:78:bb:4b:01:90:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=8e9945df-8659-424e-a459-e1274ba98027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:99:27:5f:89:f5:91:55:ff:7a:4c:ef:52:62:
31:4e:89:ca:cf:b0:4e:c8:b7:f2:58:65:fe:f8:cd:
d8:6f:48:6e:b7:3f:f1:9c:48:88:d5:0f:59:0e:29:
86:fe:c3:67:26:29:5d:6d:2a:26:22:99:f6:13:5f:
47:54:af:25:da:14:66:0c:61:e1:5e:b7:b0:10:90:
53:55:1e:a8:74:71:7b:4b:79:03:ff:22:6d:0c:a5:
62:92:95:31:f7:7a:c7:1d:33:88:33:b2:c8:cb:59:
56:ef:68:01:b3:b2:6a:e4:a0:0f:ba:09:f3:be:0f:
7e:0f:5c:cd:69:ae:7c:18:d4:ce:f1:88:81:87:17:
32:9c:11:7b:c4:11:b3:43:31:66:11:49:85:40:55:
8c:07:27:55:2b:97:29:fc:93:b5:20:47:f2:45:11:
7f:a3:70:16:21:c6:0b:62:8f:64:59:79:de:aa:8c:
ec:15:d9:4a:fa:04:fd:e4:c2:b9:18:74:53:9e:6a:
3c:d9:86:f1:70:28:03:6c:10:1a:f0:2e:7e:6d:d2:
44:d8:b4:44:79:2e:0e:00:29:76:c3:75:b8:53:37:
4e:4d:03:ca:a0:da:8d:c5:d4:e6:7d:52:88:f7:ba:
58:eb:68:77:f5:63:c1:39:ca:8f:a2:b6:0c:a1:7a:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:68:44:12:C3:3F:DB:04:4E:74:FB:32:FB:26:D9:0E:F8:96:A7:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/439c78a9-d46e-3763-9015-de203a8aa6a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.114.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:18:9e:8a:7a:1d:0c:a1:82:63:4c:a5:f1:73:35:da:0d:3c:
a5:1b:4d:95:57:e0:21:41:44:af:a7:25:82:80:37:b4:5e:fb:
61:be:fc:eb:41:f2:66:a1:ec:5b:10:36:9f:67:df:33:df:0d:
81:46:61:6d:19:9b:5e:e5:c2:14:5e:c8:a0:91:cd:f8:b6:4b:
2e:1b:21:05:87:a2:6d:d4:c1:ce:b8:3e:ad:a5:79:f0:6c:ea:
8c:5d:7c:f3:5f:df:ca:e2:3b:2c:b4:75:5c:02:83:06:48:55:
6a:f1:de:99:00:90:d3:73:a0:7d:1f:0e:6d:02:18:0c:95:fa:
07:2a:09:1b:ea:5b:b6:e7:f3:58:41:57:92:5c:f3:e7:6e:56:
31:fd:e4:76:46:6d:dc:c9:c7:ae:ac:e0:b4:55:97:5d:62:be:
a6:8f:c0:f7:f9:7d:4c:34:52:ce:dc:93:b1:c7:85:32:60:47:
05:bd:2b:57:ea:05:fe:41:34:1c:8c:ba:87:7d:7e:2b:1f:92:
60:d3:3d:84:45:a2:e4:7d:fb:3e:c6:1a:a7:29:66:3c:5a:e6:
91:dd:d7:94:50:c2:ef:f3:a4:92:85:a9:61:df:ca:9a:57:a5:
85:ef:64:64:45:0f:ef:75:3d:5a:07:e9:37:f9:17:0e:dd:1c:
f1:47:77:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:32:00 2025 by rpki-client