Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d9b1c8a-ad2b-31e1-9204-d2b4aa49c0fa.roa
File: 8d9b1c8a-ad2b-31e1-9204-d2b4aa49c0fa.roa (raw, json)
Hash identifier: wm+EPV/a9mJdt27C+PX8j/VkAc810n8/seIP0MIN/gk=
Subject key identifier: 1F:42:27:1C:7A:68:E4:AC:04:7B:B0:0F:E0:54:E4:88:C9:13:58:5A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F946723DB9D8B7A032CF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d9b1c8a-ad2b-31e1-9204-d2b4aa49c0fa.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 73.76.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f9:46:72:3d:b9:d8:b7:a0:32:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=fe6c0c47-0dc1-4ce0-a7a1-bd28418d2238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1b:f0:2a:d9:bc:c3:8d:19:57:2e:b3:f9:ff:
f1:06:49:ec:40:4c:b9:72:73:fe:75:58:d5:be:ed:
09:df:9e:3b:25:22:6c:e3:51:eb:1f:bf:28:f0:11:
43:45:03:1b:63:40:de:d4:01:eb:fd:68:e3:d4:82:
44:e1:07:f3:2d:17:37:16:2d:19:63:92:6a:08:a2:
b2:c9:bb:b9:4c:78:29:6a:67:ab:7b:3b:de:9a:d9:
3d:27:d9:31:99:4c:b8:51:12:0e:8d:65:e7:56:0a:
78:e8:44:ab:7f:ee:c5:8a:a7:7a:c5:29:b5:06:f3:
d6:0c:c1:cc:13:d1:b8:39:38:35:8b:08:33:23:0c:
6d:86:88:46:45:72:1e:38:d4:33:db:d0:db:a6:e0:
d8:b7:90:b7:18:b2:be:57:1e:b9:87:21:5d:de:8f:
13:f0:e1:1f:9e:78:18:52:ad:1a:40:1e:09:ee:88:
a3:62:94:5b:5d:c9:fa:04:52:72:fb:51:cf:b4:2c:
1d:b6:3d:85:af:fb:9b:65:61:9d:cd:dc:18:89:8c:
8c:84:ec:d1:40:41:ca:d3:93:c6:d8:65:9f:3a:16:
d1:83:2a:50:84:f1:60:da:f8:e9:c9:d6:05:c7:19:
dc:57:7d:d8:38:36:9a:4f:24:ec:c5:43:5c:0f:d2:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:42:27:1C:7A:68:E4:AC:04:7B:B0:0F:E0:54:E4:88:C9:13:58:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d9b1c8a-ad2b-31e1-9204-d2b4aa49c0fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.76.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:3f:a1:7a:45:07:28:24:0d:04:a0:9a:b1:af:9d:39:e6:26:
7e:b1:c6:09:b9:5e:f1:21:f3:1a:d7:c5:f0:25:cc:36:ee:1b:
c7:6e:25:22:87:68:9c:0f:3c:07:e6:13:f1:f4:e1:55:77:41:
31:25:82:0a:b9:0a:c1:7d:fc:de:80:40:5c:19:64:6e:0b:cb:
b2:c5:f8:66:c9:11:c0:a5:d1:94:40:5b:5d:94:5b:4c:a8:e5:
be:09:82:d1:5d:4b:cd:52:8e:2a:22:a6:89:d0:71:a8:7c:be:
83:3c:84:89:ad:cc:77:5c:7f:d8:8d:90:4b:fb:eb:d5:1c:1c:
14:54:a0:27:89:b0:2c:6f:a0:68:30:9e:12:58:01:1c:6b:cc:
3d:24:3a:88:c9:70:6e:21:39:27:47:c4:42:81:5e:16:ee:b9:
87:5b:47:cb:2a:72:dd:d6:c5:76:eb:85:b1:06:f6:a2:1f:b5:
71:72:a2:a5:70:a6:1e:63:02:7f:cd:39:9e:f2:bb:f4:68:02:
1a:72:04:d5:ca:d1:5b:f8:a3:21:b9:1e:be:95:dd:cf:05:02:
6a:ff:3e:5c:96:e2:49:be:21:f1:d3:c0:99:a7:a0:e1:05:56:
f6:06:2e:5d:6a:60:2e:d1:33:e9:d4:c5:e2:c4:6c:4d:80:cf:
34:93:e6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:18 2025 by rpki-client