Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3256157f-1b23-35d4-b0b5-2a933a66da0c.roa
File: 3256157f-1b23-35d4-b0b5-2a933a66da0c.roa (raw, json)
Hash identifier: NITDNcwxXQZgtYVwiu80sBFvDV7FhBlh8jbFnEl4LJ0=
Subject key identifier: 3A:50:46:54:24:BE:FA:5E:17:4F:E5:07:77:89:DD:19:1F:50:F6:77
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C113B236C9FF36DB1B9C380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3256157f-1b23-35d4-b0b5-2a933a66da0c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 76.141.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:3b:23:6c:9f:f3:6d:b1:b9:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=5db47614-f176-42c2-84db-df46d724a961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:28:84:4a:3f:c2:43:ec:57:39:76:ac:b8:
2b:6a:88:37:33:9f:45:88:9f:d8:2e:b1:0d:87:e5:
eb:bf:58:03:14:e6:3f:3a:1c:b6:f1:ee:16:36:d2:
a6:dd:b6:05:97:eb:ec:89:b7:99:0d:9c:d5:00:75:
78:7a:5d:70:20:28:ee:75:88:1c:83:29:e1:ee:32:
ea:1e:6f:0d:10:8a:e7:23:19:fe:45:98:ad:cf:bc:
d3:2a:63:62:60:e6:a2:65:1e:64:ac:f8:03:e6:93:
c8:cd:d4:3a:69:2e:48:7c:c5:29:9c:ac:a6:92:f0:
06:a2:89:85:fd:ac:20:9b:a0:75:9e:b3:6b:49:2a:
04:98:ba:00:b1:86:dc:65:9b:c9:c0:7b:84:ad:a8:
6f:6e:53:0c:08:0f:31:2d:8d:49:d6:e8:69:97:cb:
08:1b:49:92:40:1c:90:3c:f8:c4:18:5a:61:82:bc:
57:21:04:58:c7:bd:7a:c6:d1:73:86:19:18:b3:0a:
9f:49:2f:63:a1:6e:d4:01:ab:24:7b:6a:17:bf:b6:
9a:83:35:01:23:a5:bd:d8:5e:65:7d:60:18:5d:6b:
54:a9:e4:67:61:d8:33:38:85:79:72:ac:d4:04:31:
f1:c9:1f:a6:cd:cd:2a:13:1f:42:03:41:46:c2:af:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:50:46:54:24:BE:FA:5E:17:4F:E5:07:77:89:DD:19:1F:50:F6:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3256157f-1b23-35d4-b0b5-2a933a66da0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.141.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:ab:da:4d:bd:1b:11:de:2d:3c:6f:95:84:9f:61:02:6b:91:
f4:67:08:c2:81:68:d6:e6:bd:38:9e:aa:61:0c:9c:e9:17:c0:
93:47:d6:07:0d:2e:c9:72:6d:2a:fa:e6:3b:f2:aa:90:e5:a8:
6f:8c:11:cc:0b:a0:b3:ff:5e:ae:61:60:35:e6:74:4b:4d:6b:
90:bf:53:da:38:8c:b1:35:69:9b:44:32:f7:43:e4:e5:15:09:
b8:55:3f:73:12:2b:17:97:67:b6:f0:8f:08:ed:d5:75:d1:13:
a0:e0:23:23:0d:c1:af:58:97:d1:19:44:b9:d2:cc:d8:dd:1c:
1b:ff:1d:db:38:10:a6:e2:6b:7a:92:02:ed:60:8a:73:3b:de:
b5:d0:09:b9:c4:a4:4f:75:5b:e2:bd:17:d4:3a:8b:ff:ff:d9:
78:34:95:e7:a9:2b:95:40:73:34:0e:9d:76:e3:4b:28:24:88:
e1:e0:e7:50:10:e9:7c:fc:26:df:66:0b:7e:8a:26:b2:22:7e:
80:03:55:2c:ab:12:b6:09:d3:b5:2a:cb:60:ed:11:78:5a:10:
10:6e:cd:5a:10:a8:85:0c:79:b1:fc:e0:8b:98:30:4f:7f:c1:
94:f0:8c:15:ef:c2:8e:79:c2:54:71:77:3c:28:a0:5c:4b:65:
09:10:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:52:14 2025 by rpki-client