Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e3c00b-ce9b-3b2e-a5de-25bbf8bf2918.roa
File: f3e3c00b-ce9b-3b2e-a5de-25bbf8bf2918.roa (raw, json)
Hash identifier: crqi0GHtMEGB/jyO4z2Z56JqGhImiA/J0fZ9eihzaxg=
Subject key identifier: 3A:19:6B:38:20:97:94:ED:0B:B2:B4:34:A2:52:16:6D:59:8F:64:8C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F6E0B25FA255ED36357180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e3c00b-ce9b-3b2e-a5de-25bbf8bf2918.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33490
IP address blocks: 76.144.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:e0:b2:5f:a2:55:ed:36:35:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=b7206e77-09ab-499e-817e-c01b3335242a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d6:25:b6:b2:16:a9:d0:eb:ba:b9:a1:99:24:
89:47:e2:6d:e9:b1:9d:d0:65:77:19:08:80:34:85:
ea:cb:da:b5:d5:0d:5f:ed:51:be:35:c2:7f:a6:5f:
f6:3c:f1:09:7d:a0:8e:58:16:f7:75:77:f1:6a:0f:
0b:81:e3:2d:d5:c5:00:2b:c6:8e:82:ee:1b:b9:b1:
0d:ea:da:a6:d3:c9:fd:a7:a8:d2:eb:89:a6:54:d3:
7e:78:08:6d:99:bb:76:3b:ec:b4:38:23:c0:8c:dc:
dd:fd:98:45:e2:f4:ce:87:15:43:9c:7c:20:73:3e:
7f:5b:90:88:cc:93:47:9e:02:02:cb:5d:cd:12:35:
c1:44:b4:f2:11:e9:cb:ed:4a:ff:be:c6:e9:82:e2:
0a:77:c9:09:93:6a:f7:df:02:b0:20:af:56:7a:91:
59:16:d0:8e:be:a3:33:a3:72:63:e0:a8:c8:45:57:
d6:0d:b9:08:87:67:ea:2e:7f:27:78:2b:b6:23:b7:
91:58:79:78:4f:ca:a1:f4:73:07:63:49:0c:4f:db:
d5:87:fb:01:0a:8a:01:38:f7:36:6a:5a:21:ea:90:
f5:1d:4a:b3:ce:5a:48:ce:86:4e:1f:77:56:e6:80:
e9:49:f8:47:1e:57:6d:ee:ce:4b:a1:c7:69:9d:e9:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:19:6B:38:20:97:94:ED:0B:B2:B4:34:A2:52:16:6D:59:8F:64:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e3c00b-ce9b-3b2e-a5de-25bbf8bf2918.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.144.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:40:7a:70:b3:69:d5:08:13:6e:28:92:1e:5e:76:be:cc:5b:
e0:2e:79:30:45:dc:14:dd:89:bb:6a:01:8f:1a:a4:97:32:c7:
85:3d:20:6c:93:4c:08:18:cf:4b:36:75:fc:8a:cd:1f:e3:de:
ee:ff:97:48:aa:df:d9:1c:b3:9c:c1:8d:47:ba:46:ea:20:12:
c5:36:42:e7:02:c4:bf:bc:ba:ca:c2:fe:24:1a:73:d2:79:60:
5f:f3:5f:21:48:a0:9b:e1:2c:69:f1:f1:f1:c4:c0:93:05:cc:
a0:88:09:5a:71:d0:57:ae:8b:8e:10:99:e8:23:c5:21:1e:9e:
16:a1:f3:35:2b:78:36:2f:f6:c3:5c:68:0c:b6:59:2b:52:32:
19:c5:6a:91:96:74:00:09:07:47:60:e8:07:ed:64:a2:6f:34:
67:8b:d5:8a:a3:1b:49:91:a2:68:b3:ca:61:cc:f0:56:f6:49:
25:c5:2d:15:d5:25:a1:f5:d8:80:d4:fb:35:d8:d0:09:8b:3a:
e5:77:11:5d:7a:cb:18:92:cd:38:86:b1:7f:68:fa:9b:1c:9b:
08:30:4b:80:d7:52:22:33:10:6b:f6:18:21:8f:a5:b3:be:b0:
e3:9d:47:e8:36:12:40:3f:ed:7f:90:85:08:30:c3:05:0b:e3:
8c:2d:48:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:01:03 2025 by rpki-client