Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/913c5098-0379-370a-991a-c60e4ed25331.roa
File: 913c5098-0379-370a-991a-c60e4ed25331.roa (raw, json)
Hash identifier: ZbGUKGTmRXU/GDJDeYs0UiBIdSjLLyowpT5vTB0EXaE=
Subject key identifier: DA:0A:24:8F:A0:96:6D:3C:91:24:AF:98:A8:83:2D:BC:E1:EA:60:1E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0ADE9842E01F7CDDA9F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/913c5098-0379-370a-991a-c60e4ed25331.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 76.99.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:ad:e9:84:2e:01:f7:cd:da:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=2170518e-b95b-4992-a7b9-22c73d68eb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:8e:6a:d1:cf:0f:86:ff:7a:1e:93:ce:a0:
38:a5:e2:87:57:3c:8f:f8:32:e5:c4:fe:ec:5b:a5:
56:a3:09:7a:9a:5b:c2:df:1d:1b:73:41:57:9f:cf:
9a:c6:9a:7a:07:83:b0:98:cd:4d:ba:ee:92:5c:9e:
c3:4f:a5:db:02:a4:80:df:49:ff:c3:74:36:79:a7:
2d:b8:ff:cf:64:75:1b:fe:9e:36:4c:36:4f:2e:8c:
25:32:c2:2a:e8:d6:d2:10:e3:56:cf:08:1c:64:ba:
9a:35:72:24:9c:57:f2:f5:54:59:7c:31:c7:71:a1:
f7:d5:0a:47:a5:8c:9a:81:4e:1a:b4:2b:4a:2f:e1:
f3:de:77:92:13:6d:13:af:9d:2b:38:ae:4a:54:e5:
6f:90:17:3c:05:11:72:64:5a:1a:ff:a0:86:08:93:
93:03:61:ff:82:7f:b3:66:90:60:85:16:49:48:82:
fc:86:67:e2:56:6e:d3:32:f1:f1:1e:09:a9:5c:a9:
56:8b:70:a3:97:b6:ac:13:f1:9b:fb:94:05:6e:e8:
f8:6e:0b:cc:7c:b7:96:88:4b:0b:7a:6e:46:cf:61:
e9:b2:39:cd:33:29:f7:2a:2d:ac:28:ba:32:bd:5c:
83:b3:39:7a:d2:dd:c6:a2:b7:7c:80:53:77:09:5b:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0A:24:8F:A0:96:6D:3C:91:24:AF:98:A8:83:2D:BC:E1:EA:60:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/913c5098-0379-370a-991a-c60e4ed25331.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.99.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:1a:40:f3:d9:de:9a:82:a5:14:a7:f1:82:c9:38:1f:a4:02:
9b:9d:49:71:37:1e:b1:c9:df:d1:8f:ed:e1:5c:db:c9:e0:61:
bc:5f:98:f5:4d:ad:e5:92:2f:5c:4a:d0:8c:72:ad:a8:86:5f:
95:fb:39:a2:e6:76:ff:cd:33:17:70:d0:01:cc:b1:ad:ff:0d:
48:98:a5:11:41:8a:9c:49:2d:f8:8a:55:19:49:fe:25:d5:74:
46:12:26:e7:fc:6f:3b:33:db:ee:29:60:04:ad:d0:07:39:fa:
aa:69:fd:fc:6e:1e:47:09:da:a3:04:8a:fd:3b:e4:1c:be:b3:
5d:64:10:4c:d5:06:a5:2d:4a:78:d4:86:98:09:ac:fc:4f:15:
ff:b3:b3:f3:0b:fd:13:4b:18:97:a8:7e:76:a0:a3:6f:00:dc:
a1:3b:f3:1d:79:1e:f5:37:20:37:e7:bb:d7:d9:e9:6e:33:0b:
c9:5e:d0:6f:c2:af:8a:7a:ba:1f:e4:d5:e5:cf:0f:ab:1a:98:
b6:60:72:9a:65:f5:e4:72:c2:26:be:5c:dd:64:03:84:83:8f:
31:e9:7f:50:0a:0c:85:5f:56:4f:9a:b1:a2:88:7c:6c:39:6e:
89:a1:a8:7a:a1:c4:57:58:1a:65:9e:07:ed:c2:11:47:41:ed:
f6:0a:79:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:13:15 2025 by rpki-client