Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/309c3472-4fdd-36c6-9a07-443722d1eabd.roa
File: 309c3472-4fdd-36c6-9a07-443722d1eabd.roa (raw, json)
Hash identifier: OrTixcVml7yPrp7L/H1BjuIzdoq0tlSq/gdE1YgK488=
Subject key identifier: B8:AD:D1:6C:C0:D6:BD:0D:E5:3C:BE:CB:41:8B:DA:4C:37:1E:0D:3A
Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial: 010D0C9F43285848B4C0D0597ADAB56121434FC0
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/309c3472-4fdd-36c6-9a07-443722d1eabd.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 4213
IP address blocks: 76.8.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:d0:59:7a:da:b5:61:21:43:4f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=0a32b895-e657-4d91-a753-b5335b70423d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3a:9b:72:3e:c5:d3:cb:45:e0:fd:da:43:5d:
30:83:71:40:c4:76:a4:83:57:f5:8e:ca:d2:8e:14:
7f:2c:73:54:a9:3b:e3:3c:34:b3:10:cf:3c:4c:02:
d6:53:45:c6:2c:e4:3d:b9:f1:7b:65:58:38:13:11:
86:ff:7c:26:5a:97:6c:ed:98:db:79:80:af:d5:91:
f2:2e:5e:b1:83:f8:25:6f:0c:ee:b3:c0:9f:38:ee:
e5:1a:dc:04:bf:d1:84:51:23:37:af:9f:0a:6e:e3:
d5:45:e7:58:25:f2:8f:ec:7b:a8:38:e0:a0:03:c9:
f8:37:46:66:3a:d0:ca:5b:db:ed:f6:50:37:c7:e3:
29:53:9e:3c:1e:d3:da:c9:a6:72:9b:19:01:35:ba:
ba:55:c0:0b:6d:a1:b7:8c:e6:41:98:e3:ba:9d:d9:
6a:5e:17:ab:e4:09:ac:47:c5:20:8a:19:56:bc:e8:
6d:c8:5d:96:ec:81:d3:ba:95:29:92:7f:65:e2:53:
36:cb:69:9c:10:ee:7e:ab:d2:42:bd:e1:ba:c5:7f:
1a:34:b8:0c:bf:88:25:5d:26:86:5f:87:41:7c:11:
64:86:3e:34:bb:9e:cb:21:9c:8c:07:d0:a8:0c:c3:
83:fb:78:be:10:26:09:23:e9:b4:36:83:e6:64:d9:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AD:D1:6C:C0:D6:BD:0D:E5:3C:BE:CB:41:8B:DA:4C:37:1E:0D:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/309c3472-4fdd-36c6-9a07-443722d1eabd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
X509v3 Authority Key Identifier:
keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
sbgp-ipAddrBlock: critical
IPv4:
76.8.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:60:c4:64:7b:32:7b:c5:8e:a0:7b:03:7a:10:e9:ee:15:56:
9b:01:06:7f:c9:0c:60:cb:c1:75:4c:97:26:ff:ba:37:44:c5:
88:a0:39:08:80:e6:ff:34:b4:82:e5:23:85:c5:07:3e:90:3d:
89:6b:e7:d4:3a:39:a1:6f:f2:73:74:ac:46:4b:70:ca:ea:91:
1c:13:cc:5b:c4:c1:1c:14:64:04:a2:b4:c3:6e:75:4f:e7:22:
2c:ea:4a:b0:07:1e:a3:11:30:51:93:af:28:54:e2:7c:47:b8:
77:30:2e:6a:45:0c:3a:e5:e2:e4:42:c8:32:70:42:43:ff:f8:
1f:1b:dc:28:89:4f:ad:b4:66:87:8c:2d:be:fe:b1:00:fb:5a:
ff:1e:ff:8c:cb:48:7d:56:35:c3:07:91:b7:33:01:7b:49:32:
a1:8c:4c:d2:2f:d9:4a:17:0e:9f:d2:32:98:c3:37:d2:32:3e:
d0:1e:54:28:0a:a7:f4:94:c6:54:0b:93:49:e2:c7:06:99:bb:
29:03:28:e4:14:36:4b:0a:b5:ec:de:c9:12:36:48:dd:31:c9:
ae:2a:0c:a9:c2:25:af:26:1a:40:1a:53:52:16:93:17:f6:d7:
51:70:ec:1e:be:03:f7:85:1d:f4:63:7c:33:6d:0b:86:cc:a0:
d2:ba:d0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:12:14 2025 by rpki-client