Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2acfbccf-314f-3613-80a8-2c7483eb471b.roa
File: 2acfbccf-314f-3613-80a8-2c7483eb471b.roa (raw, json)
Hash identifier: MCqK0O3a9S0ZEN0wVyFrYFVkBW6OgoCBPPudTl1esS0=
Subject key identifier: 4D:68:46:4D:41:56:68:53:AC:C1:28:44:6A:3A:2C:85:3F:18:A0:AE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12F88D80001FD1FF81F700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2acfbccf-314f-3613-80a8-2c7483eb471b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 76.150.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:f8:8d:80:00:1f:d1:ff:81:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e71dfff7-4bf7-4f7b-a932-b8a303f90d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2c:43:23:0e:15:f4:5f:cc:11:1f:ec:c9:25:
a5:f5:51:00:27:4b:b8:a9:98:69:03:4b:a0:4d:50:
46:26:37:62:02:6a:fd:93:2e:e1:b1:b6:b6:d0:12:
f9:3d:b5:c9:59:1a:5c:89:ac:f1:71:ff:ff:10:90:
18:86:52:17:37:6f:4e:6b:3d:11:b3:a5:8c:56:13:
46:38:ce:ec:31:99:5b:5a:bb:2a:a4:59:a0:1a:6b:
54:fe:8e:6e:54:76:d5:bf:bc:39:f2:28:82:ea:76:
83:6f:98:0f:7f:68:b6:b5:4a:aa:63:c1:b9:bb:5f:
f6:4d:32:c8:77:10:73:e2:cf:26:f8:dd:74:85:e1:
49:05:09:35:7e:3f:a4:d3:1c:ca:d0:f8:34:5d:cd:
ac:2f:a8:28:a1:89:d8:04:fa:14:81:4c:02:36:bc:
5d:0a:d7:de:c4:29:46:ce:5f:af:fe:2e:17:87:07:
39:ae:76:cc:d6:fc:45:12:10:97:5a:ac:5a:2d:fd:
c5:03:00:52:ad:d9:18:16:e9:f9:6e:7b:81:ff:3c:
36:5c:30:11:f3:2d:fe:b5:99:dc:c6:80:37:7d:99:
e8:53:de:36:44:86:cf:21:ff:54:d1:5a:19:f9:a0:
35:1f:7c:3c:95:2b:2f:98:8d:1c:34:fe:79:c7:32:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:68:46:4D:41:56:68:53:AC:C1:28:44:6A:3A:2C:85:3F:18:A0:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2acfbccf-314f-3613-80a8-2c7483eb471b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.150.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:ac:49:65:ec:3b:61:cb:5e:f5:9d:8b:6b:94:16:8e:05:1b:
6b:15:31:1c:29:7f:11:db:6d:3c:2c:6f:78:f7:62:23:da:18:
71:67:37:f4:3b:1b:f9:e6:ee:49:e7:33:aa:69:53:bc:13:eb:
01:a1:7c:8f:0c:0c:ae:b0:b7:c4:48:70:00:b7:8f:4c:95:64:
e9:85:17:7f:b6:ca:88:60:ab:18:71:6c:05:35:4f:57:d1:20:
9a:a4:d3:ef:9e:5c:23:87:8f:c4:7f:50:d3:2d:54:f5:8f:cf:
c0:7b:ab:bf:4c:1f:3b:e5:ac:ae:8f:ba:84:1a:94:92:bc:5c:
49:12:4d:16:91:18:3b:19:ac:09:d1:d8:02:53:28:0f:12:af:
fb:2a:d2:16:7d:a8:b4:41:2d:e9:38:d5:7e:c7:04:1e:ee:00:
2b:e5:dd:40:b5:24:70:15:3e:e5:e2:1b:e4:39:93:f5:4f:b4:
5d:2d:6e:cc:e0:ea:b3:4b:57:b9:8d:5e:36:cf:d8:1d:17:a3:
f8:a8:17:3f:ee:d6:bf:c9:bc:c6:97:69:66:22:f3:c2:de:bf:
94:e2:fd:6a:ad:98:13:93:df:71:d5:a1:2b:db:d7:76:cd:c7:
51:ec:e8:94:05:23:7d:00:3c:9a:94:e7:a7:d5:a2:fd:26:c0:
94:ee:0e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:41 2025 by rpki-client