Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1967668e-3f6a-3978-a9fd-faecc798ca8c.roa
File: 1967668e-3f6a-3978-a9fd-faecc798ca8c.roa (raw, json)
Hash identifier: DsjEPgJLxoCGTeJnVgXZJmul2TmgPgJOyfNbf0EGYqs=
Subject key identifier: 7B:DD:4E:3A:58:D8:AE:EA:FB:82:EB:49:59:85:90:07:0A:6D:B5:2C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F8DABEE63C16754A26280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1967668e-3f6a-3978-a9fd-faecc798ca8c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 76.112.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:8d:ab:ee:63:c1:67:54:a2:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=40df3fd0-e6b9-4c5f-b290-40f4070714aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1e:bb:03:3f:0f:50:0a:d1:0c:ad:8a:70:5e:
b2:42:2e:6a:05:72:17:44:2a:71:5a:39:ca:d1:16:
05:cc:76:c4:4e:ac:d6:20:a9:6f:96:01:fc:83:be:
a4:89:1d:a9:2d:ba:88:b2:2e:3a:50:15:5a:c3:b4:
f6:63:48:36:e6:87:82:be:7c:d7:d7:03:99:98:a0:
0f:bd:95:85:2b:a2:ca:4b:0d:d5:c9:0a:9d:33:51:
83:d9:74:92:45:c3:9d:7d:9f:16:3f:6a:9d:63:75:
60:0c:ca:f6:5e:bb:0e:04:49:ce:43:b8:8c:5b:e0:
ed:15:51:8d:4c:96:e6:1d:6f:1d:47:85:83:05:ff:
f8:5b:1d:cc:e2:48:22:93:09:18:cf:06:4b:a9:19:
df:39:ca:ba:9a:7b:9e:5d:d5:45:98:26:00:57:79:
f5:dc:8e:9a:62:4d:ce:43:5a:c6:ef:76:a3:ea:2e:
6d:df:02:39:0c:17:7a:2a:12:d3:c9:d8:3a:13:86:
e7:7c:db:e8:dd:02:53:91:19:ee:a2:ed:61:da:d7:
ea:0a:95:ec:b7:43:8e:8c:08:b2:c2:ef:d1:28:33:
f7:d4:59:0f:5c:99:4c:6c:41:a8:a2:c3:7f:65:01:
48:f8:4b:a0:cd:c1:36:18:70:e6:3e:b1:b1:4c:2b:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DD:4E:3A:58:D8:AE:EA:FB:82:EB:49:59:85:90:07:0A:6D:B5:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1967668e-3f6a-3978-a9fd-faecc798ca8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.112.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:d1:04:13:78:1d:bc:2f:37:1b:c8:02:3c:27:82:15:8a:47:
49:bd:ce:a2:4d:31:64:64:36:c9:f1:e1:03:75:7d:9b:e9:c7:
44:01:ac:4c:42:bb:32:da:f1:40:65:98:6a:2d:54:6b:03:12:
9d:45:a2:89:3f:fb:8e:35:fe:5a:ea:a4:31:40:4e:22:d9:46:
2a:2c:65:1f:4b:a0:3a:4f:db:b4:77:f4:06:a6:d7:99:e8:2c:
9d:f5:3e:05:86:12:9e:b7:08:b4:09:e7:12:3e:25:b4:05:68:
0f:38:4e:93:80:96:53:b5:38:cd:3f:d7:0d:4a:ac:9c:3b:02:
3d:92:a6:2e:c9:a1:b8:8b:7f:ce:ac:34:6a:06:8a:ac:02:dc:
12:8e:3c:38:a1:f0:3c:b8:c8:52:c0:ed:0d:bc:16:e6:1a:31:
1d:2c:87:f2:e5:c8:cb:f5:2b:ae:38:b9:db:3b:03:b7:a7:b5:
70:9c:56:0a:c6:f9:eb:07:da:5c:97:f0:cf:9e:c0:d8:4d:3d:
4a:22:91:92:a8:e8:6f:6d:b1:0f:50:37:6a:68:72:11:b3:95:
c2:c8:36:91:f7:47:bc:5b:84:03:a4:fe:f8:ba:4b:52:79:41:
30:49:50:0b:23:da:08:a4:5b:cb:7e:22:1b:dc:36:b0:da:ee:
8b:e6:1b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:24 2025 by rpki-client