Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94d5555b-f5fd-36b1-9ca5-a2580cbf96a4.roa
File: 94d5555b-f5fd-36b1-9ca5-a2580cbf96a4.roa (raw, json)
Hash identifier: ZHI/cZir1/+NH2Z1o0WOE1ANU0Z3dtTAGWLempWDoG4=
Subject key identifier: E7:E5:BB:E0:64:91:1D:CF:C0:B9:D6:97:81:9C:A3:6F:8D:FE:DD:13
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8BD3D50F22BB60AB13F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94d5555b-f5fd-36b1-9ca5-a2580cbf96a4.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 76.118.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:bd:3d:50:f2:2b:b6:0a:b1:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=33bfb6da-3a30-4cfb-847d-e534f6f0f6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:70:86:d3:55:73:1b:a8:e9:29:3d:bb:5d:
d9:f8:9b:9c:28:83:77:92:78:f5:57:43:dc:16:fd:
34:43:68:69:e4:eb:4c:be:62:fd:a0:06:68:b8:e4:
1c:31:88:91:52:d0:b8:f8:75:ac:81:bf:2c:ba:2f:
35:6c:e9:f8:a3:9c:40:91:7e:7b:59:d4:bf:67:3d:
be:be:14:c1:ea:37:f3:f8:e0:4d:40:76:17:43:09:
d0:bd:8b:6b:79:7e:e1:47:b1:71:bc:9f:9f:01:1e:
0f:0e:f7:15:21:b4:b2:b5:2e:4f:77:e4:3f:c0:09:
a5:ab:f5:b4:5b:cd:47:50:a2:55:79:fd:2b:e1:6b:
da:a3:0c:7d:23:72:55:d5:97:a9:2b:07:0b:70:f0:
22:6c:a2:bc:f0:d2:dd:78:15:ee:b1:58:bb:6c:08:
c2:20:b1:de:83:57:47:74:9c:fb:f4:ec:98:a6:1e:
26:50:54:59:0f:34:b4:5b:38:6c:3b:bb:89:6b:fb:
b5:d9:34:f0:10:6c:63:af:35:22:aa:93:31:0b:0b:
2e:00:c7:8b:47:76:0b:54:41:b9:5b:0e:26:a7:24:
93:74:0f:d8:6b:13:37:f7:7f:58:e0:a8:27:b9:e1:
19:4b:4a:9f:e9:64:96:74:c7:62:bd:02:c7:39:b7:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E5:BB:E0:64:91:1D:CF:C0:B9:D6:97:81:9C:A3:6F:8D:FE:DD:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94d5555b-f5fd-36b1-9ca5-a2580cbf96a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.118.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:9e:b0:76:b5:ae:84:0c:5c:3e:23:40:d9:d1:1b:13:cb:cb:
dd:41:95:05:03:2b:0c:8f:2b:7e:2e:b3:99:02:b9:3e:40:70:
19:94:a5:17:7b:1c:8b:d0:fb:f0:bd:1a:ca:eb:2f:82:49:8e:
12:57:4b:6c:57:6b:8b:b4:4c:bd:d0:03:d4:df:73:c4:23:41:
e1:13:de:25:e8:c3:9f:ca:41:9a:22:6a:dd:b9:89:01:96:3b:
6f:b3:7d:a5:c4:2d:03:5e:f3:98:44:80:f2:2f:86:43:d2:fd:
f2:d8:60:d0:15:2e:7c:da:24:e7:81:a8:6c:90:06:e3:d8:93:
9a:98:84:47:bb:03:d4:2a:de:dd:ef:56:1b:c4:db:58:62:68:
e6:45:41:65:82:b4:a9:1b:a8:11:2e:b3:18:33:3f:92:02:88:
14:57:fe:c0:2e:e5:43:77:c3:dc:21:3d:80:ea:29:19:93:5c:
65:5a:e1:12:e5:8d:75:44:2c:2f:e2:7f:e1:02:34:aa:09:9b:
49:dc:e5:36:fc:10:01:a3:bf:5c:31:5f:37:b8:a2:ba:0f:4b:
0e:3a:2e:63:c0:ec:27:26:c8:e2:90:56:29:ea:2d:af:53:8f:
bd:56:1d:cb:7e:db:7b:a9:3c:f8:8c:7c:dd:4a:da:71:3c:5f:
1b:fa:54:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:48 2025 by rpki-client