Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3292f95-47a6-3a91-8cda-4adc6a5ece1c.roa
File: b3292f95-47a6-3a91-8cda-4adc6a5ece1c.roa (raw, json)
Hash identifier: p+SXz14t/m60jgdpjaLVnR0PISaqkPhqqNLhOAB7N90=
Subject key identifier: F8:5C:82:42:2A:20:80:82:0F:33:5F:FA:F2:4F:0A:76:62:27:D5:A9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F764BB6BF010F71C561260
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3292f95-47a6-3a91-8cda-4adc6a5ece1c.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 76.19.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:64:bb:6b:f0:10:f7:1c:56:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=01565281-fc5c-4cb0-a931-ff7ce922f951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:2a:eb:10:88:df:6f:20:3b:2b:76:57:b7:
41:75:ee:19:02:fb:ce:b4:64:a9:e4:dc:dc:e0:70:
ed:72:d5:8f:80:28:68:18:35:5b:d9:c2:22:44:a6:
5a:6f:16:36:ce:6a:9a:00:85:44:83:64:07:1f:67:
32:86:dc:f4:10:72:b6:6c:55:71:3a:1a:a3:74:6e:
64:6c:a3:36:aa:66:7d:ca:73:54:81:ed:d6:cf:cd:
6e:4e:39:b5:3f:c2:08:80:26:96:c3:ae:bd:8f:68:
aa:8e:06:84:48:3e:e0:7d:ce:e8:23:a2:20:d9:4d:
2d:25:26:0d:22:38:de:a3:85:ef:d7:88:1f:d9:10:
96:0b:38:c9:df:b4:7c:a4:b1:86:09:9b:06:14:22:
bd:4f:b8:cf:f5:04:9c:94:15:3a:d5:c9:ff:39:73:
ab:64:08:60:39:b0:de:17:6a:f3:d9:1f:46:78:13:
dc:b0:46:6a:10:3d:f8:63:91:70:c5:75:59:75:7e:
d2:60:5f:1b:8d:bd:e3:85:e2:32:93:1b:7f:dc:24:
3d:2c:39:0e:bc:58:35:5a:71:ad:dc:77:03:0b:b9:
2c:c7:a8:c6:85:b9:60:77:d5:49:48:00:38:35:68:
d0:fd:8c:b7:97:d1:b9:fe:9e:f7:95:04:d9:e8:ea:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5C:82:42:2A:20:80:82:0F:33:5F:FA:F2:4F:0A:76:62:27:D5:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3292f95-47a6-3a91-8cda-4adc6a5ece1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.19.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:88:c0:c9:42:14:b8:5f:69:ce:06:d6:f5:d2:82:2b:82:77:
ea:12:3f:0a:ab:9a:05:b1:34:69:11:ff:4b:e4:df:01:53:3c:
4c:52:63:08:06:18:36:b4:24:d3:8f:2c:34:a7:c3:94:0d:1e:
82:51:d1:2d:dc:95:a1:df:c6:98:7d:76:af:a3:db:3e:ec:76:
0a:c0:d5:db:55:36:2f:c0:5b:84:0c:3d:ae:18:bd:2f:2d:93:
5e:fd:3f:e5:5b:06:ce:ca:46:d2:1f:71:7c:3b:ac:ff:1f:45:
d4:ad:b3:be:e3:a3:52:bd:af:50:bf:80:e4:dc:eb:26:c9:1a:
37:e3:79:f6:23:ae:d7:b1:4d:e1:bf:85:b4:c1:2e:c5:b7:c9:
b0:e4:96:0a:a5:13:51:c1:30:1b:fe:1b:fc:53:88:fa:55:d6:
ae:93:0b:b8:b8:be:1e:4d:8d:83:fc:81:2e:87:68:0a:e2:71:
a6:0c:34:a2:f8:bd:9f:2c:19:60:99:80:cc:4f:83:e3:08:1e:
46:14:05:14:61:16:8c:24:b4:62:65:1e:63:17:f3:c5:f3:d9:
eb:1a:66:cf:2e:59:93:98:51:1e:29:f8:e9:04:57:d5:fd:aa:
4b:be:37:54:3e:0d:3f:e2:36:26:38:40:66:72:8f:f5:2e:82:
53:73:5e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:11 2025 by rpki-client