Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08bb3c90-8d0b-32de-8061-91c2d2d6d793.roa
File: 08bb3c90-8d0b-32de-8061-91c2d2d6d793.roa (raw, json)
Hash identifier: 4tRVOKl7buu2eteCwqyRD2hnJVl03VoJUbLURCDIGqQ=
Subject key identifier: 13:18:AD:7C:EC:E5:37:3B:ED:94:AE:A6:DB:19:31:2F:B9:32:89:42
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11EC9184BC469535FF0F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08bb3c90-8d0b-32de-8061-91c2d2d6d793.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 174.52.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:ec:91:84:bc:46:95:35:ff:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2bde82d8-46c3-4a5c-b23d-645a23fc270c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:91:b2:19:ed:54:69:ad:32:bc:54:ea:f1:53:
c5:40:cb:15:ff:0d:8b:bb:bd:26:15:da:77:1d:55:
be:af:82:65:48:72:b3:fd:6e:66:a8:1d:32:65:7c:
81:b3:93:23:89:22:a9:2f:76:7f:4e:5e:d6:04:06:
12:fc:39:63:3d:8e:b8:c2:da:72:6d:eb:49:73:3f:
3a:d9:8e:65:c3:ef:da:9f:f9:f7:89:6e:75:ab:2d:
8f:07:a4:e0:1f:bf:81:0d:2f:73:40:3e:d5:04:4f:
89:e5:83:02:5f:3a:87:02:8d:a3:4a:20:04:af:08:
68:bc:9a:ac:73:04:e3:9d:2f:a0:af:ee:fd:13:33:
cb:b8:44:82:54:c2:2d:90:4b:c7:64:b8:2c:a9:69:
73:c8:74:68:8c:61:22:32:81:ca:f9:82:47:ae:40:
33:fc:80:01:07:4b:77:f7:f8:5b:3a:02:11:39:a0:
68:0a:88:b8:87:e1:fc:dc:60:e7:96:38:5c:95:c4:
59:6b:59:62:55:2c:c8:77:de:e8:d2:2e:e4:59:80:
78:89:1a:3e:8a:23:18:d9:6e:79:34:54:f7:6a:a0:
2f:ce:db:96:57:e8:c1:6e:ca:72:8f:46:f7:e5:b8:
80:7a:0c:82:9d:a9:ee:c3:61:d3:03:c8:af:a2:06:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:18:AD:7C:EC:E5:37:3B:ED:94:AE:A6:DB:19:31:2F:B9:32:89:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08bb3c90-8d0b-32de-8061-91c2d2d6d793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.52.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:5a:c5:72:d3:67:3f:78:6c:93:cd:90:4e:44:34:72:54:e3:
57:ae:a1:3a:95:81:c7:01:50:d4:07:59:c2:2e:5b:0a:7d:4a:
99:2b:fe:05:d9:92:c5:77:04:59:9d:c5:e9:86:f5:7b:56:8a:
f6:cd:9f:01:12:f4:86:e1:af:35:3b:be:70:26:b4:6b:2d:14:
e1:d2:5d:21:20:63:8a:a0:ab:74:be:3b:de:13:1f:6e:da:b3:
60:2d:bd:89:ad:a9:ad:51:75:55:51:71:ad:32:f1:db:77:a3:
90:22:63:fb:6a:b0:c7:d4:72:68:ab:ec:e8:de:3d:13:35:fc:
6f:01:4e:43:ad:3b:fa:d9:c5:c6:7e:2c:df:34:85:71:b4:af:
e9:a7:34:37:d8:df:c4:f0:c6:8c:58:2f:be:a8:9a:75:6b:bd:
34:34:17:cc:62:79:9c:5c:df:e8:c3:ef:47:0d:35:23:dd:bc:
97:4c:35:ec:b8:48:e9:e3:0c:3d:eb:84:b8:a7:aa:41:22:a1:
54:cd:b4:85:5b:59:b7:94:ac:d7:1e:cd:80:d5:46:af:e8:ed:
d2:14:12:a5:b3:6f:96:a5:0f:a3:75:7a:f1:01:ce:45:ab:56:
6c:05:4b:d6:9d:10:b1:b4:bf:0c:f7:b1:36:5a:c2:e9:35:7b:
cd:cb:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:45 2025 by rpki-client