Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c4b5fc5-128d-3d94-b0f2-7007aaf87265.roa
File: 6c4b5fc5-128d-3d94-b0f2-7007aaf87265.roa (raw, json)
Hash identifier: 21RKjpk7l3zaJCpmGo5pPjUIzJUzIlqVdmZEnvkUuxQ=
Subject key identifier: 9D:D8:2E:A6:8D:14:C5:50:BE:B2:C0:82:43:C1:94:BD:D9:90:9B:92
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D022E788374D830908100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c4b5fc5-128d-3d94-b0f2-7007aaf87265.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 76.23.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:02:2e:78:83:74:d8:30:90:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=096d7c85-ee57-4fbc-a5c3-98074bb54bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:fc:2b:b2:94:c6:0a:53:f9:c6:2d:a3:87:
50:39:98:c5:0f:df:05:59:71:12:62:99:59:90:d4:
e1:78:34:68:2c:08:b3:27:93:06:1f:0c:38:6f:18:
2e:7c:dd:90:7e:da:67:33:d7:da:8f:0b:29:d3:f6:
fb:44:2a:5d:b5:4f:bd:55:61:6a:f2:70:3f:ef:74:
e8:ab:77:a6:8e:65:c7:98:44:16:f1:88:e6:fd:44:
d6:24:f6:81:b6:2b:a8:db:e7:df:f8:47:c7:7f:92:
6f:54:f5:a4:d4:20:e8:90:c3:e2:b1:1f:f0:36:04:
29:0f:30:65:3f:ca:73:54:6e:58:57:c0:fc:7f:29:
2c:93:09:a6:1f:be:f1:34:2d:74:78:f7:be:a0:1f:
92:95:cf:70:de:5a:71:de:78:68:93:63:ed:e6:db:
5c:69:9f:6c:65:7f:f7:03:a7:13:06:1f:f6:81:b8:
74:51:3c:8f:12:69:3f:3f:71:da:33:6d:81:eb:43:
e1:d0:77:0b:01:b1:78:8f:bf:ae:20:28:0b:20:aa:
fe:84:5e:e6:8e:8f:f8:43:db:c9:00:5c:24:33:57:
dd:72:8a:c1:dd:c1:55:3a:7a:bd:f2:34:01:90:ed:
a4:cc:0d:54:3c:a8:71:af:94:b7:5c:5e:d2:4f:e1:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D8:2E:A6:8D:14:C5:50:BE:B2:C0:82:43:C1:94:BD:D9:90:9B:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c4b5fc5-128d-3d94-b0f2-7007aaf87265.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.23.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:4d:02:ce:c5:ee:dc:b7:92:6c:dd:45:7a:47:39:b3:1f:41:
b8:d4:71:21:eb:16:14:c1:08:92:b9:d2:3e:13:78:99:0d:19:
29:4a:a0:b8:08:a5:de:dd:6a:86:32:89:13:ac:2e:d8:17:c0:
c1:71:a4:c9:63:eb:d1:e3:4f:4e:db:78:4a:cc:03:59:7c:40:
a7:95:c5:92:a8:45:9a:7d:4f:d5:6e:8a:70:b0:c7:5d:cd:53:
13:f7:8f:38:05:f0:92:f0:d1:40:f2:9c:18:df:52:a3:16:6d:
90:88:d3:12:a8:8a:24:14:1c:72:61:6b:81:75:e3:5f:6a:67:
89:60:56:db:86:47:71:1e:24:2e:c0:04:99:23:7f:33:c1:97:
91:d9:52:e2:11:d4:78:0b:75:89:63:db:51:b5:f4:f4:18:bb:
0c:fd:26:88:0d:b1:d4:d8:f9:cf:94:41:30:61:8b:ae:4a:58:
b2:a2:9f:00:27:e4:6c:e3:82:31:d9:1e:87:e0:7d:e6:ec:69:
86:c2:f1:33:2e:6f:94:37:f9:d3:d3:bf:a5:e5:7c:c4:2f:78:
50:39:be:6a:be:c3:bf:84:16:75:6e:23:a1:7f:ea:0c:c6:22:
db:fe:16:1c:44:b5:4d:fb:9b:85:ed:a9:e7:ee:e3:dd:6c:e6:
e0:06:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:12:51 2025 by rpki-client