Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae8dc098-15a7-30c2-8cb1-ef7c84805968.roa
File: ae8dc098-15a7-30c2-8cb1-ef7c84805968.roa (raw, json)
Hash identifier: ClxoLfP/0fNeZzsDAYrJraDizhY2pho/ZjTPKyLG9QM=
Subject key identifier: A0:6B:06:5E:34:34:B9:CB:D0:A1:7C:E4:DA:3C:22:15:60:DC:F7:0A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB020FD4579A7CEB9E99C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae8dc098-15a7-30c2-8cb1-ef7c84805968.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 76.21.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:20:fd:45:79:a7:ce:b9:e9:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=6c58aba9-02d6-4d79-a956-e34f520e3bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:20:21:8b:e7:02:3c:34:87:75:bf:cb:8e:
41:f1:8e:03:47:e7:5b:76:b2:28:5c:5f:50:79:03:
4f:c8:e6:c6:98:88:46:6f:90:30:0a:30:46:d5:0f:
49:ff:ad:56:77:9e:15:f6:f2:73:49:83:bd:a2:d0:
4d:8b:de:ec:ad:a2:cd:6f:c2:fb:c8:20:b4:dd:67:
d2:9f:b3:1a:f7:05:30:e2:69:47:b1:69:52:6c:c2:
3b:5b:bd:9f:54:11:08:2f:05:cf:bf:86:e9:3d:54:
0d:7f:27:a1:f9:e2:57:ac:80:ba:ed:f0:d6:59:95:
8b:7b:37:5a:01:3d:8c:1e:6f:44:6d:9d:10:19:ef:
4c:f6:0e:c1:9c:68:01:9a:f8:74:59:1d:ab:04:11:
da:ec:60:ab:e6:eb:ec:33:a3:a6:1f:36:14:1a:c1:
18:aa:ca:b3:21:6a:b9:c7:be:c3:9b:a8:2c:b6:0c:
45:16:9d:da:46:27:40:4a:44:9f:52:30:f1:00:0e:
70:83:76:c9:b9:51:47:43:4c:90:22:ee:56:62:42:
fc:17:a9:1a:6a:20:f7:1a:b9:b2:50:ca:ed:c5:78:
6a:cf:7d:d8:8a:6f:3f:13:de:24:ab:d3:cb:28:21:
bc:40:7a:08:e2:95:04:4e:77:8b:94:48:3c:7b:cf:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6B:06:5E:34:34:B9:CB:D0:A1:7C:E4:DA:3C:22:15:60:DC:F7:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae8dc098-15a7-30c2-8cb1-ef7c84805968.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.21.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:3f:be:6c:35:46:21:d1:40:c2:12:1a:82:28:4c:52:2c:16:
5a:4d:27:e7:3c:c5:6f:2d:54:e2:2e:0c:75:5f:1c:ba:31:32:
3f:3d:55:71:39:68:8d:02:5c:3f:fd:19:7c:4f:23:ec:9d:94:
5d:15:88:07:eb:8f:d0:44:84:1a:a8:bd:eb:31:de:76:3b:4b:
04:d1:6e:92:33:4d:03:46:19:b3:6b:8b:ec:73:37:a7:b8:44:
33:c9:f9:2e:fd:c2:57:7d:4b:58:75:d1:76:91:8b:8e:37:eb:
d0:80:ed:4a:b3:50:c5:a1:52:de:c5:12:4e:42:6a:8d:0d:7a:
5d:e1:70:52:83:91:b2:c7:4d:f7:b2:e2:86:2c:79:b4:2f:50:
4a:b6:46:77:87:24:97:28:cb:12:ce:31:7e:0a:cb:ca:98:3c:
bd:64:c9:c7:2c:a0:3f:c0:5b:13:47:c7:04:67:4f:9a:66:6b:
1d:0a:6e:49:30:52:2f:af:5a:4b:dd:e5:ef:10:26:43:d5:db:
91:52:4e:91:e7:2f:08:72:bc:fe:e9:09:37:fa:7c:af:96:ac:
76:5b:a3:84:3d:ae:04:24:14:ea:36:90:d8:28:a8:a6:c5:3b:
84:4a:05:70:4f:8c:eb:dd:44:6e:a7:f5:b3:e5:e8:ea:db:37:
71:78:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:28:40 2025 by rpki-client