Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/558d57e4-be4c-3bc0-ba8d-d12a9f68ce30.roa
File: 558d57e4-be4c-3bc0-ba8d-d12a9f68ce30.roa (raw, json)
Hash identifier: RVX4FlK+HhVtxXkMC663cnDuKrWDHKEi6+CtDRL55js=
Subject key identifier: 9E:73:B1:88:21:A0:14:DB:54:8F:F6:35:1C:25:0C:06:48:CE:5F:01
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEB650AF6F4DE664D019C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/558d57e4-be4c-3bc0-ba8d-d12a9f68ce30.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33660
IP address blocks: 76.149.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:b6:50:af:6f:4d:e6:64:d0:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=6a582fa6-1894-4c44-8bdf-04d4f31e045e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:4e:b6:8f:38:ec:de:b6:79:be:de:7c:1a:
2c:9a:4d:97:bf:79:1c:9e:b9:86:35:3d:6c:34:0c:
a8:59:99:22:8d:cc:f6:b0:de:cf:b4:3f:f0:f8:1a:
42:26:f5:4b:25:88:a3:13:11:a2:2c:7f:b6:ae:12:
b8:ee:ab:c7:dc:06:b0:b7:e6:2e:a1:20:56:80:78:
4a:f9:90:f1:39:9c:02:bb:15:3e:a9:e5:27:e4:85:
63:8b:e1:cd:73:c1:af:74:c2:7f:00:91:88:d6:5b:
a7:0a:bc:9d:57:3f:85:c8:e1:d3:6d:92:96:a1:2b:
df:01:be:cc:be:f9:0f:6e:60:35:fa:28:98:82:cc:
cc:29:b0:00:bd:e4:4a:7c:77:78:a5:81:fc:11:b9:
37:8c:f0:9d:61:f4:20:9a:14:f8:89:29:d8:3f:f3:
0d:7e:32:f4:f4:4d:7b:30:6b:73:85:cd:31:31:d6:
d4:45:69:bc:17:5e:7e:ab:50:9d:4d:d5:31:c1:79:
4e:aa:08:db:e2:66:fc:f9:45:2d:ca:91:3b:2e:66:
be:0d:81:00:d1:c4:cf:04:53:cd:f4:8a:93:de:0d:
7b:19:3f:18:32:8f:e0:30:67:2f:3a:f8:52:de:9f:
f1:e9:73:af:88:7a:bf:90:30:3e:b9:e1:38:1e:40:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:73:B1:88:21:A0:14:DB:54:8F:F6:35:1C:25:0C:06:48:CE:5F:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/558d57e4-be4c-3bc0-ba8d-d12a9f68ce30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.149.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:d0:71:6e:eb:75:27:27:d2:74:75:7f:50:2b:dc:ca:4d:2d:
95:ac:23:27:64:85:15:da:f3:aa:e2:db:85:55:69:76:c9:9a:
97:5d:16:2a:b4:78:12:7f:33:6f:56:ec:15:75:61:61:94:de:
c6:66:01:55:35:6e:d8:3d:3d:c1:4f:9e:4e:fa:73:bc:ad:53:
14:e8:d5:8e:fe:dc:d1:3f:75:b5:55:1c:e0:1d:dc:04:bc:0f:
65:18:01:5c:e6:b0:bc:53:b5:1c:b9:81:cb:3d:33:64:f9:a7:
ca:0a:22:c0:0e:73:33:e2:ed:24:6e:cf:c2:f1:6f:6f:44:2e:
23:de:bf:c6:ab:88:b3:21:12:5d:c9:c6:ec:56:b6:3b:b1:39:
cc:f1:7c:b3:2b:ff:67:20:47:d9:ad:94:d4:bc:3d:e1:28:61:
88:4d:45:55:a4:c1:67:ee:3d:62:c6:62:2d:ea:fd:0a:01:30:
cc:de:74:c6:54:97:76:ab:00:70:1b:54:9d:eb:96:84:e4:33:
a0:db:81:fe:e1:e7:1a:ad:95:c5:be:ba:6f:ea:d5:fb:72:6f:
79:62:8b:00:da:a4:82:49:ce:2c:7d:a2:9c:ad:e5:2e:cd:1c:
e9:91:05:41:b3:73:a1:14:4e:ab:32:fd:db:0d:14:f8:8b:7d:
d0:51:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:55:49 2025 by rpki-client