Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbef3178-7b45-3c1e-bfe3-7b2f8e38c0e0.roa
File: dbef3178-7b45-3c1e-bfe3-7b2f8e38c0e0.roa (raw, json)
Hash identifier: i8dLmtdePNxypwUcktevvqxOvsDdSZPbcZKDuY8zjnI=
Subject key identifier: 21:7E:CA:77:81:48:FD:E6:BA:20:E7:04:02:BE:80:10:4A:B5:DF:88
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF1DD2912688627E969E20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbef3178-7b45-3c1e-bfe3-7b2f8e38c0e0.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 76.99.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:1d:d2:91:26:88:62:7e:96:9e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=5355ece6-deff-46d0-b96c-f307f5439e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:7c:af:07:ee:14:a0:af:15:34:78:c9:eb:
6b:e5:43:28:d5:d4:20:65:0a:9f:40:02:f5:1c:06:
c8:db:31:67:37:d9:1f:d7:f1:86:b7:c3:87:a3:c8:
90:30:fb:bd:17:2a:ff:f0:74:83:b9:f7:fe:8f:9c:
e8:c9:76:78:ca:cb:79:e3:72:70:5d:e9:1a:9b:04:
9b:30:d8:7b:16:92:90:74:7e:ec:72:d6:8c:9e:80:
a7:68:d9:13:1d:87:ad:36:9a:03:f1:31:80:51:97:
b6:89:86:25:2a:f1:fd:61:c6:a8:5b:23:07:8e:8e:
48:77:e7:e7:f9:d9:b7:65:a8:bd:77:87:cc:d5:ca:
86:cd:70:9f:a8:7e:cf:33:6e:e9:c8:4b:f4:34:60:
4f:eb:b1:72:8e:7d:93:23:2c:a5:49:1b:af:38:95:
e8:b1:ad:57:98:10:7b:34:ee:db:bd:5f:1f:a8:ee:
26:bd:fe:25:5d:5e:e5:20:e5:25:d2:ba:42:00:a3:
51:e9:ce:c5:78:31:9d:9a:6f:a8:7c:0c:7e:66:2c:
be:15:6f:ca:b1:8f:38:d6:84:00:e0:07:57:38:83:
00:e7:58:85:09:b4:e0:03:b4:93:1c:f1:f8:1e:8a:
4b:2f:e3:7b:bd:45:91:fd:75:35:01:e1:0b:88:35:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7E:CA:77:81:48:FD:E6:BA:20:E7:04:02:BE:80:10:4A:B5:DF:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbef3178-7b45-3c1e-bfe3-7b2f8e38c0e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.99.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:df:b8:76:b1:64:e1:6c:b1:8f:2f:6c:88:dd:fb:f5:52:18:
1f:8d:3f:11:92:8a:9e:23:94:fb:ca:bd:4e:ce:4b:d3:f7:66:
96:12:f3:c3:f9:b7:16:a0:47:6d:d7:e4:b3:09:f8:ed:05:a5:
2b:72:50:90:db:21:6b:2f:2a:76:77:dd:7f:ad:85:45:dc:ae:
30:3b:eb:6e:48:3c:6c:5d:4c:bf:c0:79:af:24:8e:25:d1:30:
17:f2:c0:ac:05:ab:aa:93:e2:2e:1b:52:c6:2d:db:b8:8e:53:
8d:b3:29:1f:44:ec:e3:70:e5:5e:57:d5:12:c8:b2:1b:1e:a6:
6f:65:87:02:1f:fd:a1:5e:52:22:09:8e:03:0c:d4:bb:af:7e:
12:a2:00:ba:bf:8d:e4:11:aa:8e:47:2e:b7:a4:37:fc:cc:d0:
fd:be:a4:a7:a5:c4:df:b1:3f:12:dd:24:8d:6a:e7:41:f8:a8:
3d:03:ad:8d:e2:a5:2e:0c:38:a0:fa:e9:a1:0a:fa:21:e1:24:
f2:1d:63:ca:cc:fa:f1:35:1f:fd:01:a2:00:a4:73:a8:ca:28:
2b:b9:0a:33:d8:bd:ec:bc:77:d2:e6:ea:9b:62:f5:b5:5c:f8:
1d:f3:5b:67:da:d5:8f:db:10:fd:16:7f:d3:f3:a5:84:a7:bb:
ed:a5:dc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:24:45 2025 by rpki-client