Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/b46e6792-09cc-3fe1-96a8-f8242176c655.roa
File: b46e6792-09cc-3fe1-96a8-f8242176c655.roa (raw, json)
Hash identifier: 4s7Ig9GXKRfqTZacCKpjLdFgOm/gP+ARsEQN/g92HSw=
Subject key identifier: 0E:71:64:71:B1:AA:A6:C8:2A:50:E9:F5:5E:0E:AB:41:B5:A7:7D:2C
Certificate issuer: /CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Certificate serial: 010D0C9F4328584883E5BAE28A6F9D6307DD8080
Authority key identifier: C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/b46e6792-09cc-3fe1-96a8-f8242176c655.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 11766
IP address blocks: 76.8.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:ba:e2:8a:6f:9d:63:07:dd:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=f1252266-dca3-4375-bee0-beab3cf1c969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:23:a1:1e:43:17:c3:8e:90:2c:aa:71:bd:
7b:f5:6b:f3:14:59:2e:ff:de:14:a5:cf:ed:54:66:
34:0d:26:71:e7:08:c2:4a:63:b1:59:b4:fd:8a:c2:
47:85:cd:e5:db:d2:26:5a:1c:81:de:86:f5:6a:e0:
b7:af:1b:62:e5:5c:0d:94:ac:4e:25:d2:9f:4c:96:
db:e9:76:4c:71:90:3f:5a:ec:28:ef:ba:dd:67:61:
2d:90:66:2e:f9:d5:d9:cc:43:81:2d:01:39:ab:5d:
68:1b:aa:44:c9:72:b6:43:3a:ac:71:f1:e9:fe:af:
51:9b:d4:a0:f4:72:8b:d8:0b:81:b0:d6:8b:13:29:
20:9c:09:3d:7e:c8:6b:72:1b:91:07:a4:2e:54:99:
f9:47:e5:4d:37:e2:fc:44:d9:36:aa:5e:f3:69:65:
d7:3d:c2:be:4e:72:c1:ac:1a:e5:93:5c:bd:19:fb:
11:3e:b6:85:89:a7:ef:8d:4e:c6:c3:d1:3a:d9:a9:
50:6e:71:13:1c:94:64:18:51:6a:1e:39:e9:32:c1:
7a:fd:a3:17:ad:67:80:f8:03:69:1b:3b:9d:4f:01:
52:51:8f:fc:56:dd:a3:39:30:03:37:f0:d8:bb:0e:
4a:62:3c:79:a5:8a:30:2a:70:01:02:72:19:53:c7:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:71:64:71:B1:AA:A6:C8:2A:50:E9:F5:5E:0E:AB:41:B5:A7:7D:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/b46e6792-09cc-3fe1-96a8-f8242176c655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl
X509v3 Authority Key Identifier:
keyid:C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
sbgp-ipAddrBlock: critical
IPv4:
76.8.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:92:4d:3a:47:82:9a:30:44:2b:4f:2b:54:1f:23:51:e6:69:
d9:38:a3:9b:8d:4e:ab:b2:22:56:a8:5d:ab:64:f3:0d:77:2e:
d1:62:3d:bb:82:95:95:aa:2d:56:87:9d:14:11:87:64:7f:1e:
07:b3:0a:19:dc:98:f8:76:ab:a8:74:3c:04:a5:03:3b:99:32:
78:06:76:d2:96:88:eb:8a:a3:55:ba:ef:ee:a0:02:c7:55:95:
cb:d1:37:45:8a:79:e6:ae:1e:26:1d:a6:da:e3:84:ea:34:fe:
3e:aa:51:96:a8:dd:86:92:10:08:9c:26:7f:21:b4:20:ff:58:
6c:59:ff:5c:61:b6:78:56:17:0f:b2:3b:19:62:7f:e5:4c:4c:
09:ac:10:1f:f0:f3:d9:93:1e:3b:a0:eb:76:6e:fe:11:97:f9:
6c:0a:93:61:94:04:88:b6:e7:02:8a:51:39:38:6d:a2:c4:12:
55:f3:82:16:71:1f:c9:4b:40:e4:0e:0b:9c:91:06:60:c0:7a:
a6:2f:ae:e1:73:08:d1:9b:33:9e:6a:4e:28:a1:0a:e3:be:3a:
c0:b7:a6:1a:8b:77:6b:8c:1e:f4:e8:23:0d:df:fc:cb:f4:ca:
ef:47:36:82:9a:e1:06:13:9e:76:0a:5c:b6:3d:50:22:bd:49:
65:66:22:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:36 2025 by rpki-client