Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1acfbeb6-f62f-38ae-8b72-fed9a320d851.roa
File: 1acfbeb6-f62f-38ae-8b72-fed9a320d851.roa (raw, json)
Hash identifier: aHt+3HMw6h77Dghfc4br1C8b6RvNICBS3iJyxPN+Ibc=
Subject key identifier: 42:24:AF:FC:2F:DA:C1:EF:75:91:0C:68:6B:3E:67:CD:98:BE:9F:48
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12F792781D75A98258C532
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1acfbeb6-f62f-38ae-8b72-fed9a320d851.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 76.150.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:f7:92:78:1d:75:a9:82:58:c5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=38b8c72b-98b4-4709-888a-b4dda02d515c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:cc:83:f2:aa:e2:4a:db:16:49:bc:9f:70:
cb:6d:34:bc:f4:d6:de:9f:dd:0c:42:b8:c6:5c:5f:
fc:1b:bf:53:05:a6:b4:70:e1:9e:b1:c3:a8:37:c4:
9d:d9:e8:29:64:2a:5b:c4:07:76:5a:db:fe:e8:16:
02:f4:9e:f8:6c:fc:5c:ca:03:28:86:7e:5e:ea:19:
5b:73:08:8b:ac:2d:93:c3:ef:e9:4b:6c:68:00:d1:
77:a8:03:72:a4:c5:a0:13:dc:de:8c:26:29:4e:6b:
6b:c9:89:b0:62:e7:db:93:74:48:d4:95:90:1f:c2:
8c:c3:92:42:d1:a3:cc:d6:49:d1:f2:43:38:10:d1:
4b:7d:96:ed:00:43:75:0e:99:50:d4:c1:96:c8:9d:
19:46:8c:d9:40:74:23:b5:41:e6:a5:d0:af:01:0c:
1b:68:7e:c0:57:49:cf:d7:7f:7e:35:55:db:00:76:
cb:74:79:9b:0b:13:c9:43:96:74:87:5d:34:37:e6:
79:15:41:ed:35:46:00:fe:e3:ba:18:4b:9c:10:4c:
99:26:2a:fa:0c:23:4c:44:82:ad:6c:84:92:88:3a:
58:97:33:cd:06:69:ac:13:85:d8:97:98:84:8d:e5:
52:11:79:7b:33:b2:4b:33:a3:a9:90:98:64:02:37:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:24:AF:FC:2F:DA:C1:EF:75:91:0C:68:6B:3E:67:CD:98:BE:9F:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1acfbeb6-f62f-38ae-8b72-fed9a320d851.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.150.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:8c:22:87:4e:30:e2:a1:fa:c0:9f:ee:79:20:2a:64:75:61:
d8:2a:75:98:54:95:52:5e:52:67:c7:dc:1d:d1:9e:f6:01:a0:
9b:76:80:13:04:73:ad:dc:e3:c7:14:6d:66:f5:6c:a9:91:d0:
bd:b1:16:70:88:8d:91:0b:9b:07:5e:02:b9:44:3f:a7:f7:1f:
92:dc:d9:81:2e:13:47:f4:4b:28:9e:72:3c:c2:4d:49:71:e0:
da:65:e3:42:4e:31:da:4f:f6:0d:0b:4c:f7:57:fe:20:bf:c9:
17:09:1c:ff:33:b3:1b:7e:89:ee:95:b0:9a:78:b7:d0:c0:09:
4d:3a:68:0c:47:fb:7b:45:0c:39:a0:7f:bf:ca:77:4d:7f:86:
62:9c:9f:76:93:04:ed:2a:d7:5f:e7:bc:f1:2a:4c:51:be:72:
e6:7c:66:bc:5e:a2:a7:89:04:b0:2c:77:ed:1b:db:27:a1:58:
7b:2e:ad:ea:d4:d3:64:d1:1e:cd:c0:6f:81:1f:2d:fb:ee:1f:
e3:19:7b:4d:7f:3a:04:05:cd:82:19:14:0c:2c:50:85:ae:ad:
21:c2:5a:ca:a6:21:1c:ef:d5:04:5b:48:1d:48:4a:68:6d:a8:
32:1d:4b:b9:17:b6:b2:24:a6:3a:42:a3:27:2a:18:b0:9b:34:
a8:84:fc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:30 2025 by rpki-client