Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d55d5e2a-fc5e-3474-9e7c-21040e9818b7.roa
File: d55d5e2a-fc5e-3474-9e7c-21040e9818b7.roa (raw, json)
Hash identifier: 7XQiyhH8rYLWI06OrADiNQ8/BJ+ymtIY8VGr1BQPFow=
Subject key identifier: AE:A4:87:7D:E0:89:80:C2:41:D0:C0:38:4B:17:26:C1:AA:F2:89:10
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203CBAEC57FE5D98152D4450
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d55d5e2a-fc5e-3474-9e7c-21040e9818b7.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 76.97.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:ba:ec:57:fe:5d:98:15:2d:44:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=2584e3e2-4817-4431-a904-dccc7d8dcaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:db:ef:2d:39:c4:49:61:76:6d:be:43:80:
0b:56:d1:77:9b:0d:fa:f9:5b:f4:38:10:a2:25:86:
fd:a2:bd:d8:9d:ab:2f:ea:c9:90:1f:63:2f:04:44:
d0:ea:b3:8a:60:0a:5c:ef:5d:cc:a1:96:0e:6c:f7:
4e:0d:00:2f:1c:83:1e:c1:91:22:32:58:95:6a:e9:
50:a9:c4:ed:98:87:31:d0:66:f5:b6:c2:ce:80:2c:
63:be:53:eb:94:59:83:d7:1f:4c:76:c5:ec:a0:54:
fe:cc:fd:4f:b3:64:a1:28:69:45:89:a8:d9:30:7d:
4a:d4:50:62:b3:c7:00:1b:fe:7c:f1:80:32:be:25:
0e:9d:78:37:b5:85:28:50:23:7b:d0:e5:39:5f:c2:
b8:10:80:8a:de:f5:8c:91:52:f6:e7:f9:50:bb:26:
0c:b5:76:6c:66:6e:24:75:49:a8:55:a6:82:71:97:
e4:33:01:a4:0d:45:25:72:8a:ff:2e:ce:e1:0a:eb:
f3:96:fd:f0:e9:50:9f:91:fd:3b:c7:c5:f4:e3:99:
20:ed:1f:27:11:ab:92:e9:2e:f4:56:37:65:28:e0:
b9:d9:df:ef:53:3a:3d:5f:d3:32:28:ac:ed:71:e7:
54:25:9a:e4:e5:61:1b:a8:8f:f2:d8:33:84:b7:e1:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A4:87:7D:E0:89:80:C2:41:D0:C0:38:4B:17:26:C1:AA:F2:89:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d55d5e2a-fc5e-3474-9e7c-21040e9818b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.97.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:95:6b:b4:34:0f:9d:1d:a2:c2:1d:98:1e:52:45:1f:22:07:
dd:75:8a:34:08:01:0e:da:0a:8b:b8:f0:bb:f0:ca:5a:84:8c:
8d:be:3f:f1:4b:e3:b5:55:0c:89:0f:3b:c2:7c:35:ec:fe:37:
4c:bf:fe:ad:a7:d9:b3:99:5f:58:45:4e:cd:90:3e:18:cf:69:
36:54:a3:3d:0f:85:ac:22:c8:3d:58:27:75:9e:6d:33:74:89:
47:69:9b:9c:f9:1b:9e:21:dd:7c:17:67:c7:32:d7:e6:83:c3:
cd:9d:7b:e3:42:90:48:73:b7:11:91:dc:02:bc:48:03:4a:b0:
fc:76:b9:f4:a3:de:a8:b6:01:82:15:e0:b6:74:92:25:2f:31:
b6:e5:42:e0:27:2c:63:e2:95:ba:76:8f:9b:79:c8:c5:0e:e3:
27:97:c1:5d:5b:30:00:3c:62:b9:da:fd:95:e0:16:e4:ae:7e:
47:24:5c:2f:60:5b:fd:4d:fe:ee:a1:da:8e:22:a8:c5:20:ce:
2d:e8:15:42:87:22:90:a9:81:60:03:b3:c9:93:b3:ee:57:5d:
a5:c4:00:10:f4:07:28:67:b4:c8:62:15:ce:26:c8:88:55:ea:
fd:03:bb:49:26:eb:46:fa:f7:b0:dc:0a:aa:c7:27:28:5a:4a:
63:02:12:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:57 2025 by rpki-client