Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/480f4be9-7f5e-3c5b-952d-e4973ff81753.roa
File: 480f4be9-7f5e-3c5b-952d-e4973ff81753.roa (raw, json)
Hash identifier: wFJ24g31XdPNdnDW9V5LHX57NxCARpaIwV91N3wBTRI=
Subject key identifier: E7:58:B0:98:24:68:07:1D:D8:A2:FA:52:A3:E7:49:C2:BF:66:CD:F6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7687EBC4D0441948809C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/480f4be9-7f5e-3c5b-952d-e4973ff81753.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 76.28.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:68:7e:bc:4d:04:41:94:88:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=2af6f130-6052-4a6c-bf9f-68a90e381b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:19:78:f9:49:25:87:1b:6e:ec:c3:f7:ee:
a9:83:06:94:2d:0a:16:6b:65:9e:d4:25:42:b6:74:
37:18:86:6d:2b:aa:4f:ac:4a:6e:06:0a:5b:6e:58:
a5:eb:d2:52:d3:c6:e5:b7:7e:a1:d5:79:7b:77:4c:
15:3c:f6:74:7a:b5:dd:3e:3c:e1:2a:89:5c:96:cd:
3b:56:36:69:51:b1:0a:62:0e:a8:d2:0a:56:62:8b:
af:ab:ec:23:a2:9f:3e:14:0d:44:73:fa:41:84:e0:
44:95:a6:41:fc:f0:24:31:b4:aa:98:92:37:63:2f:
7c:78:e6:6c:24:aa:b7:21:59:26:9b:09:7d:01:4f:
41:7b:b9:da:8b:a7:7d:0f:54:4a:aa:fa:6a:4a:39:
dc:6c:19:0a:0e:04:f7:ba:91:72:35:bd:b6:c0:ba:
a8:96:32:10:33:22:15:ef:6d:f6:0b:2c:c1:76:fe:
be:04:c7:c5:b8:92:55:dd:04:f0:03:41:18:4f:e2:
c9:9c:2a:cf:76:7b:b7:8f:bd:48:73:33:28:34:34:
25:50:b4:c8:0b:b9:46:be:d9:26:6c:98:54:e4:44:
d8:75:3b:0d:3b:a5:d2:df:55:5e:1f:93:cf:c3:7e:
f7:42:6a:92:bf:62:64:9e:a8:67:d4:3a:18:5f:0c:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:58:B0:98:24:68:07:1D:D8:A2:FA:52:A3:E7:49:C2:BF:66:CD:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/480f4be9-7f5e-3c5b-952d-e4973ff81753.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.28.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:a1:fd:c5:9f:ac:5b:7b:3d:9a:c1:17:24:b4:8c:32:21:1a:
54:a5:dd:3b:61:ea:2d:6c:fd:af:69:d5:c7:a2:af:3c:8f:45:
39:e0:92:67:dd:61:47:a9:ce:e1:fc:83:f5:8c:80:0b:1b:01:
70:f8:dd:30:3c:f3:19:69:48:69:cb:e6:2e:ae:95:60:54:c8:
b1:4f:3f:9c:7c:be:2b:b3:f9:ac:b3:06:ad:8a:74:ca:16:6e:
23:cb:d6:90:57:1a:77:97:69:cc:eb:f3:64:0e:a8:b2:1b:83:
a0:c1:03:21:19:ab:9a:09:8d:98:97:93:d6:95:cc:be:3d:2e:
03:59:bf:2b:dd:66:7f:45:2f:3d:2c:3d:49:69:79:59:bf:cc:
c1:c1:d4:3e:7b:09:31:ce:23:3d:00:00:7a:3a:f5:89:84:3a:
7c:d4:2c:3a:88:27:59:bb:9b:fa:b0:f5:e8:b8:9e:34:20:7a:
a2:9b:43:b5:ab:fe:90:b9:a4:d3:48:dc:a8:3e:2d:bc:5e:d0:
47:f0:42:4c:8d:a0:e3:1f:fe:59:b9:93:8b:e4:cd:88:5d:06:
93:76:b5:64:32:40:5c:b9:4f:c6:29:bf:bd:8d:7d:b4:08:49:
4a:36:7f:5a:f4:05:80:6f:83:f9:2c:5c:2a:51:b8:a2:9c:38:
6a:92:32:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:08 2025 by rpki-client