Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/444cd0df-af79-3678-bc49-3b8f55e3b2cb.roa
File: 444cd0df-af79-3678-bc49-3b8f55e3b2cb.roa (raw, json)
Hash identifier: 93BF7pdUtVFl310J3c/IWbxQ7Cd20hacfGWzRLHZi5s=
Subject key identifier: 0B:08:C7:E8:5A:87:FB:19:F9:80:67:C1:A2:DC:D8:ED:DC:61:F0:7B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7602A1F9DABF732594800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/444cd0df-af79-3678-bc49-3b8f55e3b2cb.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 76.119.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:60:2a:1f:9d:ab:f7:32:59:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=649999a2-499c-435b-9e62-7c7ab593646f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:33:b0:3f:49:dd:0d:94:be:e5:13:8b:03:37:
ab:9b:8b:f2:31:62:01:71:5b:1b:e5:61:98:c6:89:
e6:a5:92:da:5a:fe:75:e1:4a:b7:d6:af:84:ba:de:
3f:a2:3a:ad:5a:9d:4e:11:1d:87:2d:fd:94:01:0d:
f1:e6:0b:a6:75:87:eb:44:5f:a7:6e:a8:71:46:20:
84:9c:20:0a:cf:cc:e9:7e:87:2d:a0:13:72:bb:2b:
3c:25:e7:26:b7:75:8a:96:92:96:5d:61:76:a9:d6:
e9:14:56:a2:98:e5:ea:4e:1d:b3:c9:a4:bf:b9:1c:
19:cf:63:d5:70:ab:b6:17:a2:89:d7:b1:79:25:65:
e7:3d:01:35:f9:6a:91:86:b4:ab:fd:29:f2:b8:c7:
71:b8:ba:23:5f:29:0a:6c:74:f2:81:02:45:39:21:
2f:d9:93:bf:e2:e2:05:76:ea:b0:4e:12:86:ba:b3:
fe:4f:0b:02:d6:1b:fd:72:c7:92:25:29:15:36:0b:
93:9a:a8:ad:b3:14:d9:5d:9c:50:60:b5:e3:b4:da:
c1:3d:1d:f6:fc:73:d1:21:14:07:25:1a:2d:28:43:
4a:c5:97:55:77:e4:23:ba:93:4a:d5:6c:d5:d5:fe:
65:bd:39:a5:88:9a:c7:be:5d:37:12:29:8b:1e:3c:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:08:C7:E8:5A:87:FB:19:F9:80:67:C1:A2:DC:D8:ED:DC:61:F0:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/444cd0df-af79-3678-bc49-3b8f55e3b2cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.119.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:bb:6a:83:c9:8b:4a:f0:6c:f9:8f:d6:1a:38:69:be:49:36:
33:69:7a:ef:56:d9:01:ef:b5:da:7e:f6:50:85:70:b6:f2:be:
a8:17:4f:7f:d8:08:c0:00:0b:3c:da:1c:c9:22:c4:0e:1e:8e:
41:9b:78:e0:c3:01:9b:55:c7:7a:01:37:6b:78:2d:f4:07:9d:
56:74:6d:69:f5:91:01:8b:33:51:5a:f2:3e:6f:a0:22:09:5c:
d5:dd:79:7c:52:be:81:72:aa:2a:15:8b:ab:e8:f4:8d:e1:7f:
d0:89:07:8e:9f:54:77:c9:2e:86:6a:0c:41:65:83:34:0d:13:
1b:a7:d5:87:97:96:86:75:b5:b9:6f:f0:2c:5b:ba:03:0f:7c:
b8:17:3c:d3:ec:23:83:06:8f:17:a4:99:4e:f8:5d:54:3c:e4:
7a:7e:31:2d:51:00:d3:18:59:4c:e4:63:e4:cf:29:bc:cd:61:
bd:4d:ff:b8:3e:18:13:57:66:1b:7d:29:1d:bb:e6:ed:ea:49:
56:49:8f:a7:cd:c0:2e:39:34:77:a1:aa:af:15:a0:7c:9f:fe:
5e:11:38:46:5c:a4:7e:28:7f:5c:a1:27:ed:7f:23:f1:2c:13:
fb:20:63:d6:1f:68:27:ca:17:15:ea:d9:3d:b1:27:04:7f:3d:
c7:0f:44:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:07 2025 by rpki-client