Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af7cc8ab-2915-34fa-9bdc-ca72d44f9f74.roa
File: af7cc8ab-2915-34fa-9bdc-ca72d44f9f74.roa (raw, json)
Hash identifier: fjKpl85i9kXrnxJ4b3smAblYWy2Hd2Nd0uoLvr7Mi1U=
Subject key identifier: 02:1F:41:BB:51:8D:0C:4D:C4:B7:3C:98:BE:73:93:09:D5:3A:58:7F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D3B5E72D3EE4AFE19FCC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af7cc8ab-2915-34fa-9bdc-ca72d44f9f74.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 20214
IP address blocks: 76.96.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:3b:5e:72:d3:ee:4a:fe:19:fc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=96bb2af8-4ed8-4e8e-8091-39cb846c1cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:65:8a:e9:7d:e9:9d:e6:3f:ba:76:41:63:d8:
6d:60:47:21:c6:4e:9a:5b:31:09:76:89:86:5b:f0:
37:dc:5e:b3:00:30:ab:ce:62:ca:48:f1:f2:26:be:
df:39:a8:94:a1:44:6b:e7:f5:f6:77:ca:93:cf:7c:
bc:d8:a4:d3:8b:29:53:29:65:ce:d6:7c:ac:cb:d5:
a5:60:55:9d:84:00:9f:1b:41:9c:d2:81:2c:f7:ae:
84:d2:f4:65:c1:08:3f:9e:0f:5c:6e:fa:18:23:3d:
85:49:09:c5:91:c2:16:96:86:6c:a2:36:98:29:ba:
bb:f2:5e:b2:71:06:9b:9d:87:81:82:d8:f9:c5:78:
8b:92:a3:43:42:c5:8d:cc:2a:fd:50:67:d5:4b:ba:
d6:58:32:2d:11:83:74:31:02:a8:19:7b:33:39:ba:
6b:72:d0:92:af:1b:73:f1:af:a8:d7:98:68:cc:5d:
a3:42:18:c6:36:e5:96:4f:cd:c4:1d:b9:c7:7f:e8:
76:4e:1a:f0:5f:81:fa:94:1d:b8:d9:d1:53:2e:f5:
cd:7a:04:59:0f:53:11:ea:c0:29:6e:e8:66:b0:67:
a7:3e:0f:62:04:e6:38:51:07:61:c9:6a:08:ea:95:
e3:78:87:17:c4:0b:66:be:12:0b:05:54:bd:9d:aa:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1F:41:BB:51:8D:0C:4D:C4:B7:3C:98:BE:73:93:09:D5:3A:58:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af7cc8ab-2915-34fa-9bdc-ca72d44f9f74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.96.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:de:a1:b3:36:ef:99:14:65:4b:fe:16:f7:78:35:76:d3:b2:
fc:90:8c:69:4d:e7:80:6e:04:38:b9:f3:96:a2:ac:ec:e3:5c:
74:e0:07:53:0e:9c:39:71:bf:b9:7c:76:8d:6c:3a:8c:45:a7:
84:1a:84:d9:f9:3b:e6:45:4b:c9:12:3b:54:fd:30:9d:a8:8e:
ee:b3:1e:4c:36:e2:66:70:01:ee:04:a2:01:a0:c4:06:80:38:
fc:16:a0:eb:9e:8d:bb:6c:57:c4:62:97:92:0c:c5:f4:27:a7:
15:fa:a6:93:e4:3a:11:5c:19:65:40:19:fb:07:96:d2:07:f2:
e7:80:60:98:4a:52:ce:19:dd:b1:db:ac:3d:da:91:4d:2c:35:
8c:5a:2c:d3:bf:38:8a:f6:8a:68:bd:3d:e6:24:4f:6a:09:36:
ef:68:21:6d:8c:69:88:bd:7e:93:29:61:a2:4c:89:09:32:7e:
e3:12:c1:66:a6:34:d5:19:c0:19:62:66:15:e2:10:5f:d4:e0:
d4:16:6c:d2:92:42:51:c6:53:52:db:86:4a:a0:7d:13:80:89:
82:4f:4b:b4:0e:2f:fe:de:96:5f:f2:bb:df:4c:b3:41:96:b6:
77:0b:af:e5:02:49:8a:ba:c5:13:7b:e9:9d:bd:2f:2c:3e:7b:
f2:5f:ed:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:57:05 2025 by rpki-client