Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2728096-b2c8-32dc-abbc-9e6c74812637.roa
File: e2728096-b2c8-32dc-abbc-9e6c74812637.roa (raw, json)
Hash identifier: ofaSzlJBJ7dRYbzsvOGZIPbNBLfcY7XXSINNmUeWrm0=
Subject key identifier: FD:0D:6A:6E:16:7F:44:BE:6A:45:C5:D9:C1:93:9C:5F:68:78:2B:A6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C612FBA633D58AA63F9F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2728096-b2c8-32dc-abbc-9e6c74812637.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 76.97.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:61:2f:ba:63:3d:58:aa:63:f9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=d0f44b01-7db7-40ff-8b1a-cf7403b78297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:80:c3:c1:ed:bd:36:62:4b:39:bb:ee:18:
05:a1:65:e7:8f:55:cc:df:e9:a6:d5:d9:5e:81:26:
3e:53:2f:0d:02:ac:84:57:fb:6f:ba:54:1d:17:4d:
b7:c1:d2:a2:a5:80:22:64:74:32:09:19:ff:36:2b:
2e:e5:29:99:44:54:bf:da:93:a8:24:41:f5:43:34:
a5:79:60:b5:e6:54:de:4f:bb:59:34:44:d2:a4:85:
5e:1e:fe:81:1a:10:51:8b:0a:4b:b6:1b:e4:5f:95:
fc:55:ea:c6:39:ea:0d:73:ab:23:02:a7:12:15:df:
68:df:44:ed:17:0f:e8:3b:6e:75:b8:28:a1:c7:82:
13:ee:51:ee:d7:42:48:da:be:a2:c0:eb:f3:67:a6:
c0:48:0b:fe:4b:7f:43:41:2a:43:1e:f1:e9:19:b4:
0f:9f:66:54:30:cd:fa:41:0d:01:fa:b2:9e:8e:2b:
63:48:d6:9b:9b:b5:de:e4:6e:5d:63:1b:0f:80:25:
f0:65:08:c3:14:0a:f8:f5:5b:52:bb:eb:21:a5:d1:
6f:80:96:45:fb:39:04:a3:cc:1d:e2:8f:71:aa:30:
fb:3f:7e:67:5a:d4:9c:17:fc:e6:22:2b:bb:a8:9f:
9c:23:79:61:3b:81:f5:93:03:f4:99:30:5c:95:7e:
c7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0D:6A:6E:16:7F:44:BE:6A:45:C5:D9:C1:93:9C:5F:68:78:2B:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2728096-b2c8-32dc-abbc-9e6c74812637.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.97.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:47:6b:dd:6c:7b:8f:34:4f:fb:92:0e:67:01:8a:2b:dd:f1:
08:8f:8a:ff:a8:9b:27:c1:1d:e8:43:f1:de:06:c2:e5:d4:6b:
5e:d4:eb:63:1b:ad:7a:6b:2b:20:6a:07:3a:13:a0:0d:5d:e9:
14:05:9e:be:58:99:de:b6:19:2c:51:3d:6f:79:36:5b:33:75:
25:80:fd:32:15:21:eb:9f:c9:a3:3a:3a:b2:e2:fa:38:2d:a0:
04:98:dc:e0:1f:c3:9f:dd:4d:70:61:04:6b:3a:89:63:78:3f:
e1:48:d7:2b:de:22:a1:0c:51:a7:f3:bc:d7:1c:16:11:73:6e:
a3:a5:fb:94:79:81:17:64:51:c0:9d:14:32:a6:a4:19:14:8b:
2c:94:0e:3e:ce:55:34:ab:df:4a:d4:0a:a2:23:e3:7a:a1:5b:
76:9d:dd:16:c3:91:44:e3:ef:c0:28:89:b2:fc:50:57:6d:ab:
ad:fb:e9:e6:66:d0:e8:6b:f3:de:6d:25:bc:32:73:b6:73:e3:
3f:1f:67:fb:6a:98:8e:5e:2c:e0:c4:08:6b:38:53:f0:19:34:
36:93:53:96:68:68:15:08:00:d6:36:52:1a:12:72:7f:7c:f5:
3f:82:72:29:c0:a7:73:ff:9d:e2:28:06:1a:38:c3:40:23:eb:
5c:8b:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:34 2025 by rpki-client