Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c840dcf-e21d-3af3-a648-32582eeff7c4.roa
File: 0c840dcf-e21d-3af3-a648-32582eeff7c4.roa (raw, json)
Hash identifier: BtXN1lpr9ovgZrcwPQSfF7gWK9SB63fYifmdF8YZDn4=
Subject key identifier: 4D:20:58:93:E4:DF:6E:12:A3:90:4E:5C:60:8C:63:0F:73:C6:AB:3B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143C1B80F243DF58B80B6300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c840dcf-e21d-3af3-a648-32582eeff7c4.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 76.143.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:1b:80:f2:43:df:58:b8:0b:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=bb6bbeb9-48cf-4c77-afc2-1982ecd5f0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:94:db:9b:b2:4d:14:5d:26:12:79:5b:ac:
5c:e2:b5:ff:a2:2a:53:a9:50:92:5d:b1:a0:e5:3d:
83:23:fd:24:a1:19:c5:a9:d5:3d:07:41:a6:25:1b:
60:54:57:32:35:c3:b2:de:70:b0:4a:3a:23:18:86:
f3:b2:0b:c7:a8:1d:45:e6:10:ef:53:34:1f:57:59:
3b:36:e6:4e:28:09:22:b6:b1:2d:a6:19:df:60:d3:
51:0d:3c:48:3e:ba:34:8c:cb:03:9f:50:a6:96:f7:
42:0f:97:3a:2a:41:f0:1d:0c:8f:93:9e:b0:c0:2a:
43:70:9b:9a:45:3b:53:da:7f:f2:6e:f1:87:1b:1e:
c1:42:10:af:40:00:d6:e8:8a:c5:f5:84:1f:15:36:
64:27:1f:4f:a3:d9:9a:95:c4:ec:d6:f1:b2:60:0e:
c6:5d:83:1d:a7:2e:17:1b:14:ee:ad:8a:da:18:7b:
70:91:03:d8:40:2d:b1:fd:13:52:e9:7f:8d:58:88:
7a:f3:66:4a:39:ab:62:08:45:7e:87:00:af:1f:f5:
65:09:af:a9:75:59:fe:67:bb:1d:77:19:82:c0:69:
11:96:09:03:1f:71:d0:27:c5:3a:b8:3a:8f:f3:0a:
15:6a:28:1e:e7:88:40:ac:e6:02:bf:96:e9:45:0d:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:20:58:93:E4:DF:6E:12:A3:90:4E:5C:60:8C:63:0F:73:C6:AB:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c840dcf-e21d-3af3-a648-32582eeff7c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.143.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e2:25:a6:84:f6:5e:0c:a7:4f:d6:0a:83:d8:fe:a3:ef:f5:
f4:77:1e:0d:73:33:18:ec:aa:34:b4:46:63:6c:e2:d1:0c:ee:
80:db:5f:00:6e:84:d7:a6:fd:83:7f:f5:d8:e5:23:40:af:20:
e7:ef:cb:38:28:4c:a9:03:c5:7b:7d:f4:87:fb:fe:81:2c:16:
15:00:1c:01:58:fe:7f:0d:84:b3:44:aa:74:66:f5:d5:a8:7a:
d7:83:0f:98:bb:ff:cc:d2:72:88:d7:86:b9:20:77:a5:a6:b6:
19:d4:c8:4c:c7:84:c2:87:4b:d7:c7:92:ed:75:9a:37:cc:6e:
43:73:ec:00:ff:1a:3c:35:22:15:1b:ff:c4:84:d0:02:db:d6:
3e:42:33:ff:9e:12:cb:96:21:5e:98:38:67:f9:84:09:84:eb:
22:1d:73:e8:11:0e:f6:17:b8:bb:a4:f4:23:a6:51:bd:e7:b8:
8c:55:25:d6:0b:09:de:73:2b:0c:04:1c:aa:5f:1f:3d:d4:55:
67:5d:a2:28:ab:03:ef:a1:ff:14:b0:3d:b8:41:98:ab:9d:99:
66:fb:12:98:4d:6d:c5:27:76:c8:32:f4:74:32:26:3f:88:8b:
91:b5:57:41:b9:68:86:49:55:cf:c6:5c:0f:53:d6:fc:51:6d:
c9:46:5d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:45 2025 by rpki-client