Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85734c33-8408-3a19-9ea4-132729d3d288.roa
File: 85734c33-8408-3a19-9ea4-132729d3d288.roa (raw, json)
Hash identifier: 8xPpC3fVUJq8Q4j1WBoK6/RRsnv5HVlRp2P+IKhMpl0=
Subject key identifier: 72:92:C7:A2:A0:98:C2:DD:15:A4:E3:05:B6:D8:04:17:B0:B9:77:B4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F22C55D4BD04821B7D9FCA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85734c33-8408-3a19-9ea4-132729d3d288.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 22258
IP address blocks: 76.107.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:55:d4:bd:04:82:1b:7d:9f:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=bc773e06-2f8f-449e-b2aa-f33dd03243db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:84:1d:e9:fd:c2:c2:5f:51:06:ed:ac:e9:23:
1c:f9:23:21:70:f8:0e:1a:9b:14:af:45:ea:4f:ef:
eb:f7:e8:dc:4b:1b:1b:eb:cb:e9:8b:09:fc:88:78:
d8:18:14:6e:8d:18:94:36:8b:7e:34:27:6b:16:42:
a9:87:6c:41:c3:7c:8a:e3:2d:a5:4d:e6:a3:fb:7d:
42:f6:2f:9b:f3:ad:0b:79:b8:7d:23:bf:25:89:43:
44:26:54:71:99:20:3e:cc:7a:99:51:ec:48:b2:cf:
1f:55:1c:83:49:d7:5d:44:95:52:69:4d:ee:85:d4:
40:5c:e7:4b:84:78:f8:8a:31:db:bc:8d:3b:32:d4:
1d:8f:7b:7f:50:0d:d4:14:50:29:f6:cd:91:45:32:
89:5f:5e:f7:98:fd:47:65:b5:e6:7a:8b:9d:8c:84:
ba:c1:49:70:29:7b:1c:cc:15:da:b5:e7:40:1b:ed:
bb:9d:78:20:84:bb:29:6c:76:40:ed:21:d3:fe:0c:
03:87:cb:e9:ec:ce:39:94:94:ff:90:fc:9d:07:0a:
61:79:4f:0e:7d:b5:20:10:fb:77:b4:b0:da:42:98:
23:e4:5a:5b:b4:62:af:47:6a:41:51:9e:82:51:8f:
e2:c1:e0:5e:ca:c3:e6:86:c9:d1:2c:e5:77:8e:04:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:92:C7:A2:A0:98:C2:DD:15:A4:E3:05:B6:D8:04:17:B0:B9:77:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85734c33-8408-3a19-9ea4-132729d3d288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.107.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:c4:a7:8b:56:f5:54:fe:1e:6b:5e:fd:45:a7:f3:a0:1f:58:
27:c4:a8:a4:b8:89:e5:78:a0:36:26:2b:77:e6:2b:e4:90:ad:
3f:c2:23:05:0f:18:f8:dc:ad:d4:b3:be:b3:7b:b8:c2:6a:36:
5e:d1:9c:95:07:f6:80:a3:50:ed:48:43:71:39:be:88:b3:cf:
0d:52:32:5d:da:94:88:31:8b:0e:bc:33:f9:f8:d3:bf:58:38:
d4:82:ea:9d:17:c7:8e:b5:51:8a:8a:9c:5f:e0:d3:c9:df:71:
27:bf:fc:ac:c8:2b:20:c0:5a:9d:2a:20:e3:ac:d4:32:ee:e0:
bf:63:f2:33:d4:51:d2:e9:ec:43:3a:e6:e2:f3:c5:0b:b1:15:
54:7b:42:84:be:63:77:56:1c:46:16:f1:de:f4:46:22:28:77:
7e:55:7e:c2:a6:ff:f1:41:81:e8:c9:3c:b7:72:cb:a1:30:bf:
29:ee:25:6d:26:43:e8:16:a0:99:a5:4a:73:c7:ab:73:9b:59:
09:4e:2c:11:45:b7:7b:5d:51:2c:c2:2d:f3:96:cc:7a:61:0d:
52:ba:bd:c8:1a:a6:ee:e9:10:f1:8a:19:72:81:46:32:3a:40:
95:7d:28:00:9b:8f:12:2e:25:dc:63:e9:66:c4:c3:06:d2:ff:
50:75:db:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:28:54 2025 by rpki-client