Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a0a1217-5b1a-3cf6-8fd1-dbd92a8584f8.roa
File: 7a0a1217-5b1a-3cf6-8fd1-dbd92a8584f8.roa (raw, json)
Hash identifier: bnVDJCFdFK8S0NhOIIh0PpZbMnFNi9/Ho9/6Qban8bU=
Subject key identifier: 1C:0C:FC:0E:2B:7A:74:A1:AE:70:8E:9A:73:54:15:0C:A6:2B:CB:AF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB1B703B6D2782060480000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a0a1217-5b1a-3cf6-8fd1-dbd92a8584f8.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 76.103.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:b7:03:b6:d2:78:20:60:48:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=24df2d92-f696-4e23-9f23-78e1806fd489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2b:ab:0f:d9:c0:bb:28:e1:08:48:bb:a6:26:
60:c1:0b:34:9c:f3:78:82:07:01:c7:b6:ba:18:17:
bf:32:b7:5f:7d:68:fa:2f:be:6f:5d:e6:19:54:f0:
9a:ed:89:26:e4:e4:eb:ed:23:f1:5f:9e:7b:49:9d:
15:47:21:c4:66:5f:be:af:55:29:67:1f:8f:0f:e2:
a2:76:49:cc:47:83:da:03:35:b4:2c:aa:d3:70:ba:
10:23:c5:ad:d7:5e:a8:eb:be:6a:49:31:e0:00:44:
66:5f:91:30:9d:74:a3:ab:9c:22:a9:03:34:ad:da:
5b:fb:4e:e0:4f:23:ac:ca:65:bb:40:dd:86:19:e5:
43:2f:0e:c5:36:2e:39:2b:21:b7:73:b1:bd:15:d1:
ae:14:49:14:5b:b6:04:e8:30:07:41:15:95:a3:24:
c5:08:05:ef:b3:56:57:29:7d:d9:ba:0d:68:92:f6:
35:73:86:29:31:89:8c:d4:a8:a4:46:41:43:ad:b8:
85:d7:3a:27:66:e7:3c:15:2c:66:8d:4a:21:23:be:
1e:51:23:29:36:b5:88:6f:45:15:ad:99:4f:05:4e:
5b:72:e2:49:85:4c:21:bb:35:9c:0a:98:48:2f:7f:
f5:86:0f:2c:d2:03:61:3a:e4:ad:b0:a1:17:d6:d9:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0C:FC:0E:2B:7A:74:A1:AE:70:8E:9A:73:54:15:0C:A6:2B:CB:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a0a1217-5b1a-3cf6-8fd1-dbd92a8584f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.103.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:d7:58:81:7b:3e:6a:dd:32:1e:82:94:59:d0:50:d9:08:8f:
16:d7:2b:3b:a0:05:55:93:7e:8e:6c:92:49:14:6a:68:0d:51:
fc:35:b3:79:5d:a2:3f:ef:7f:91:3b:98:5a:65:93:57:2b:75:
d1:7a:22:71:0e:3b:d7:ee:e4:db:bd:b6:8e:c6:ba:69:cd:f9:
01:51:4b:f9:29:6c:30:95:fb:db:ce:dd:3b:76:4b:13:9d:0b:
34:e5:a4:6e:43:d3:89:b6:96:e5:de:e3:80:f6:11:83:f6:f3:
dd:cf:7f:56:61:8a:e0:fe:86:2b:e1:5f:f0:5e:a8:fd:62:e7:
57:a3:7c:b3:53:40:4c:45:86:3f:ff:ab:54:b1:f8:24:c0:47:
db:ab:55:a1:fa:40:a7:19:b4:29:9a:6a:f1:ab:00:ce:fa:b8:
22:fc:5d:f8:eb:4f:d7:16:26:89:d6:d3:8a:b9:9a:3c:fc:a5:
d4:b0:67:86:f2:8d:1e:03:1e:c6:b2:ac:7d:d1:28:b2:0e:0b:
e8:49:40:de:13:c6:eb:bc:73:41:81:3e:2c:85:37:de:4b:bf:
c7:c4:2b:ce:31:01:4e:1b:df:ad:cf:67:27:43:a4:17:1a:b4:
2d:7f:ca:63:37:2f:2e:c9:ab:6c:be:4d:e5:bd:84:66:d6:95:
e1:ca:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:55:38 2025 by rpki-client