Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d52e240-f975-3637-bdfd-799c24e84c38.roa
File: 1d52e240-f975-3637-bdfd-799c24e84c38.roa (raw, json)
Hash identifier: ioqDaYRwfjJaKzgEtFa4gaHKC41+tXrxr1aS5WEAKPo=
Subject key identifier: 71:56:39:54:E2:E5:B9:42:86:1C:AF:DB:4E:7B:FC:74:C5:8B:6A:BE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B329B916F839E0CA89B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d52e240-f975-3637-bdfd-799c24e84c38.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 76.152.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:32:9b:91:6f:83:9e:0c:a8:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=4914f862-ba01-4cf7-96ce-135b1f889a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3f:f2:f5:91:9f:a2:76:e0:29:dc:3f:c5:15:
a6:94:0a:6f:e4:1b:26:4f:25:cd:0d:fe:74:56:da:
a9:6b:c0:20:e4:2f:fb:83:7c:13:4d:51:33:90:f5:
08:d1:7f:37:85:2a:5c:b1:43:ef:08:e1:3d:50:b4:
6d:71:c3:8f:d9:5c:09:1c:b9:59:aa:2b:7d:df:33:
ba:a3:9b:9b:17:d3:4c:9c:f5:46:cc:14:19:00:39:
b4:ca:14:41:36:11:7c:d3:74:d2:29:f4:a3:1b:1c:
dc:d7:b9:a9:7a:a5:a8:78:ca:09:e1:8d:f1:d1:57:
25:3a:22:eb:6c:ed:10:e1:5a:1f:a9:0a:7d:3e:18:
e8:e6:cb:41:84:51:b5:0b:dc:28:65:46:4d:f0:5b:
84:8a:cf:ad:0e:0f:85:e6:ce:cf:ab:9a:e6:3e:fb:
f5:9f:44:2d:f4:df:d9:bc:53:2e:c8:b4:a2:1d:1f:
0f:45:98:65:ae:e6:7f:d4:98:a3:de:ff:13:e7:b2:
8b:b3:54:c9:4e:8e:af:eb:34:d5:ff:5a:73:af:d5:
42:0a:00:87:e9:e5:8f:ce:ec:ef:95:54:07:81:a2:
90:77:ca:ea:e5:48:c2:f3:34:fc:6a:6f:33:70:2f:
ea:b4:37:3a:33:3d:2e:06:be:7c:82:dc:50:f9:81:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:56:39:54:E2:E5:B9:42:86:1C:AF:DB:4E:7B:FC:74:C5:8B:6A:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d52e240-f975-3637-bdfd-799c24e84c38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.152.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:c6:96:b9:66:e5:b3:ea:cd:17:3e:b7:b1:e1:1d:c7:39:69:
55:12:3b:e3:5b:38:63:47:d2:e2:4a:12:a9:9c:21:dc:4a:6b:
c3:78:16:de:8e:77:2f:0b:8d:fe:d7:76:58:d5:1b:e8:b8:4b:
b2:29:83:3c:20:71:52:0d:c5:e4:bc:01:ba:3a:be:a4:ca:33:
27:be:ba:c4:3c:47:39:00:41:34:9a:86:4f:7c:dd:56:fe:03:
25:a0:db:14:0b:40:ca:33:97:54:f8:f3:0a:08:d6:4b:57:3d:
4a:bc:35:e7:55:54:5f:71:12:4d:e9:a6:16:ab:6e:05:7f:62:
13:e8:95:27:b2:f3:49:af:c2:fd:fb:5b:68:81:f0:90:10:55:
82:a1:08:72:d1:3b:25:6a:65:77:a0:fc:2a:fa:18:9c:c5:33:
a1:a9:be:63:63:b0:89:ff:8d:7f:e3:25:d3:37:1e:56:1a:a3:
3b:42:0b:0a:2f:16:92:89:ec:62:7d:d5:f7:1a:d2:84:ab:d2:
fd:8a:ae:b5:25:59:e3:07:9b:26:67:80:09:05:ff:52:b4:30:
65:ad:1c:1c:a8:38:43:c2:47:a9:8c:c5:51:36:88:62:5c:06:
b4:78:4a:4b:eb:ce:cc:f9:56:4b:55:60:ac:59:03:70:3c:69:
b5:4c:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:49 2025 by rpki-client