Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e6c5b9-a6f8-31c3-ba35-6aa403212989.roa
File: 87e6c5b9-a6f8-31c3-ba35-6aa403212989.roa (raw, json)
Hash identifier: IV5ziTl2nqhwWgSpLret5RKSMiu7gK2RSeMaBNbJZ/4=
Subject key identifier: D2:19:A1:22:56:D0:53:DE:C2:72:FD:2A:C5:2D:64:4C:3B:E8:F5:E7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F65077B91A39D1EEA8C5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e6c5b9-a6f8-31c3-ba35-6aa403212989.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 76.96.226.64/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:50:77:b9:1a:39:d1:ee:a8:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=c229d86f-c0df-405b-812d-e8ed87b3ba15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:b5:4e:9f:f5:6c:7b:5c:0d:52:63:88:c9:
62:41:fe:7f:1f:4d:12:8b:53:ed:8a:34:09:fc:1a:
49:08:0e:82:d1:e1:a2:6d:2a:7a:05:da:34:8a:70:
f3:55:ec:ed:bd:72:41:f7:df:15:0a:8f:bd:a6:d9:
c7:84:96:15:c7:19:35:f2:28:7d:c5:9a:f6:79:0a:
a1:1e:c3:f0:25:72:17:1c:76:65:de:19:1e:cb:98:
de:42:dc:d0:ce:3f:4a:18:0d:c3:67:3d:2c:2c:f7:
7c:70:29:ab:ba:16:3b:7e:9b:c7:87:11:ad:aa:2b:
a7:b5:c0:21:09:83:85:fd:a7:5d:a3:3b:56:e1:42:
47:0e:20:ec:d1:9e:f2:56:3f:d6:16:2c:92:0c:0e:
0e:86:4f:64:fa:51:e8:af:d1:80:8f:93:6f:4f:9f:
70:46:69:9e:d1:db:a1:69:59:3c:d3:78:49:3f:6d:
43:81:06:9b:1c:5e:c6:4d:7b:6e:80:d0:d6:91:b3:
4a:31:f7:dc:b4:7e:2c:9d:c9:ed:74:84:99:75:3c:
20:29:9a:24:fe:0b:6a:19:1f:c7:f6:11:f4:3b:08:
0e:48:c6:ac:07:7a:c2:c9:e7:af:49:7e:fc:36:d6:
4e:0c:69:3b:b6:85:9b:66:01:06:8e:27:73:98:b4:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:19:A1:22:56:D0:53:DE:C2:72:FD:2A:C5:2D:64:4C:3B:E8:F5:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e6c5b9-a6f8-31c3-ba35-6aa403212989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.96.226.64/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:d1:e0:7b:56:53:8f:09:17:32:45:a1:e3:05:29:9c:ae:7f:
6c:ba:73:ff:8f:13:d6:4d:21:44:1a:2d:78:39:9e:dd:89:5a:
8c:4c:e5:d8:2d:24:92:ce:d4:de:21:99:6a:a5:b1:e1:9c:8d:
ba:44:8f:55:c0:59:b3:49:38:fc:8b:ba:ab:3f:3a:2a:77:92:
0d:78:e1:46:a3:d5:1e:48:15:7c:86:50:be:67:e8:5f:e2:68:
96:5f:0f:f0:e9:96:9c:49:92:31:2c:aa:07:f7:fe:6e:25:f3:
49:86:91:2b:3e:80:2c:ad:df:6d:2d:5f:a9:69:95:c2:5c:bd:
f5:4e:0d:ed:24:a4:27:63:27:9a:a8:f0:55:ad:16:3a:f1:21:
b4:1c:9f:19:ab:63:6e:ed:95:d4:3c:b5:72:05:16:ad:2f:32:
c9:2f:86:d5:aa:7e:94:a0:71:3a:3c:a6:6c:8a:e7:12:fc:04:
35:82:9c:84:2e:1f:18:51:f5:1b:a5:dd:a4:7d:8d:63:d9:05:
83:14:b3:b1:31:67:40:a1:53:c9:f7:ed:49:ad:e4:fa:a8:68:
5d:17:a3:09:d9:a0:ec:43:93:61:49:fa:af:6d:7e:09:95:a9:
9f:71:82:2f:4f:86:7e:77:c3:02:3c:4b:1f:12:7c:d9:4a:96:
cc:d0:8d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:45 2025 by rpki-client