Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/6291b140-596c-370b-a2d8-09d70105238c.roa
File: 6291b140-596c-370b-a2d8-09d70105238c.roa (raw, json)
Hash identifier: R0nwafXrnb89RAeKivyznMFnGq2R5c2KQMbvrRi/Jww=
Subject key identifier: 47:46:27:35:BB:67:D1:BC:C7:54:9B:25:49:54:D3:67:70:A0:74:94
Certificate issuer: /CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Certificate serial: 010D0C9F4328584909E6A4421438927B9F5CC880
Authority key identifier: E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/6291b140-596c-370b-a2d8-09d70105238c.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 55211
IP address blocks: 76.72.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a4:42:14:38:92:7b:9f:5c:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=2702a589-286a-4b38-b267-fa5310c09672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:24:ea:f0:d2:8f:f5:77:44:ae:e8:05:89:
75:df:15:c6:9b:a0:bf:5a:ff:b6:1e:a1:97:ae:d6:
80:08:07:53:54:b2:0e:12:09:7c:e2:5d:36:1c:50:
cb:06:d3:c6:55:66:59:80:7e:53:8b:b1:6c:74:c0:
5d:8b:dd:43:8e:57:71:43:c0:1e:b9:e9:07:8a:45:
00:0a:0d:1d:58:05:ba:e3:8d:a7:44:d3:a3:7f:e3:
34:49:f6:35:d5:dd:42:f0:d6:e7:c2:c1:f8:03:13:
64:ef:0b:f6:6d:8a:2d:93:c4:91:74:8a:15:56:a5:
c8:64:67:6e:ca:3a:46:c0:8b:83:d7:ec:98:09:a8:
b0:74:1f:68:2c:89:d9:4f:db:82:cd:94:f5:8f:14:
32:ba:a2:7f:5f:23:ed:73:42:c1:dd:95:f8:a5:ce:
1e:4d:e4:6d:15:51:82:51:b8:f6:1e:2d:79:dd:b1:
a3:b1:0a:05:5d:12:0b:19:f1:75:28:e7:9f:51:b3:
04:75:3a:e5:30:d4:ea:cf:68:77:60:20:cb:0c:c0:
de:bd:c1:44:28:81:6c:72:32:fe:f1:af:39:d8:62:
2d:c9:45:d6:4f:31:a9:70:04:da:aa:41:46:3f:b4:
d9:20:09:40:ce:57:cc:23:23:2e:fc:5a:82:25:e6:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:46:27:35:BB:67:D1:BC:C7:54:9B:25:49:54:D3:67:70:A0:74:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/6291b140-596c-370b-a2d8-09d70105238c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl
X509v3 Authority Key Identifier:
keyid:E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
sbgp-ipAddrBlock: critical
IPv4:
76.72.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:ea:57:48:a8:14:3f:69:67:5e:6f:a0:a0:d2:09:b2:2c:de:
c3:ea:73:6c:eb:8a:68:28:e5:bc:93:e6:d0:b2:3f:c6:47:50:
14:e0:c1:19:b2:36:cc:97:79:3d:54:57:b4:7f:4e:0c:c2:80:
d4:56:28:66:a2:91:6b:f1:a4:60:ec:8f:cf:c8:67:e8:27:64:
60:58:ac:15:fe:ee:13:3c:5f:49:04:b8:4c:2a:f8:26:60:9d:
2e:0b:d6:77:ef:c6:c2:d4:bd:2b:dc:4a:42:05:29:8c:21:dd:
19:ee:54:97:57:d3:27:b4:2f:89:de:34:4a:1d:2f:e0:e4:45:
55:e6:48:05:9c:26:e3:ec:ff:ed:5c:b8:a9:3c:d9:14:5e:ae:
27:9b:57:5a:4f:3f:37:6e:5b:a2:ec:b2:49:f6:cd:c4:2c:7c:
a6:c8:3b:38:ce:dc:05:ea:99:c1:7b:9a:b4:8a:a6:13:10:ff:
66:98:5b:fe:06:75:75:e6:81:ed:57:87:68:06:34:a9:90:ee:
de:1b:8b:85:79:ff:2e:7a:e4:20:4a:6d:9f:a0:9c:fb:01:70:
60:bb:ad:47:03:51:cb:c2:28:9d:da:ad:0f:9c:52:e3:39:96:
39:7e:05:ea:5e:0c:54:9e:32:a2:ea:3f:7d:31:15:6e:ba:e2:
e2:2e:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:24 2025 by rpki-client