Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e4c2ff-d463-3a10-8b5b-d763bccb2c54.roa
File: 38e4c2ff-d463-3a10-8b5b-d763bccb2c54.roa (raw, json)
Hash identifier: Uq6IK9Ga1dMcxU5gzqyRB6GKasYnU977ncfH8HlMrFw=
Subject key identifier: 42:DC:EA:74:6D:84:AD:7A:B6:82:BC:6B:26:EF:62:8A:70:45:78:41
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B7912006BBF992BECD380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e4c2ff-d463-3a10-8b5b-d763bccb2c54.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 76.112.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:79:12:00:6b:bf:99:2b:ec:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=3ff3fde6-de3f-4115-a951-dee970d89d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:5a:1b:bc:93:6b:58:05:bf:1c:fa:54:13:
b7:59:0d:94:c6:aa:46:54:74:44:c4:30:16:06:89:
7d:2b:ef:a0:22:27:1e:87:0e:15:92:39:91:d5:e8:
f8:f5:39:ab:a7:c5:21:8d:f8:b3:73:24:e6:e2:a2:
83:97:5c:cc:d8:b6:bb:aa:b9:a4:11:c6:bc:57:dc:
c7:d1:30:35:ec:b0:91:67:ce:79:d8:8f:ae:0f:63:
15:1b:8e:c2:4c:53:de:6d:19:70:8d:9a:c6:9b:bd:
d4:d5:34:fe:27:b3:19:52:72:1f:45:c5:49:38:63:
17:ad:ea:2a:50:ee:49:fb:ca:1e:57:d9:29:53:ba:
f5:f8:e8:5a:fa:27:1d:b5:ba:cb:7c:53:a6:77:76:
05:47:13:82:54:87:da:ca:b0:f2:f2:47:9e:22:54:
8c:c7:49:60:a0:90:a5:b1:53:93:e4:fb:9c:9d:1e:
cc:a9:ba:71:fa:d9:26:52:9c:a8:1e:59:a1:3f:ab:
3b:92:83:48:8d:28:a2:3d:0d:fa:f7:b7:a3:16:1d:
bd:2f:36:7c:fe:01:1a:d5:e6:8a:33:0f:01:84:b9:
7a:7c:89:79:ca:88:35:9c:fd:80:85:9c:0e:3e:36:
48:51:68:6c:d4:ec:c0:d5:90:06:2f:83:2e:b7:06:
3f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DC:EA:74:6D:84:AD:7A:B6:82:BC:6B:26:EF:62:8A:70:45:78:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e4c2ff-d463-3a10-8b5b-d763bccb2c54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.112.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:2d:46:e1:2c:25:e5:70:b2:17:d9:88:5f:83:70:2e:b5:90:
38:47:db:d3:ba:fc:fd:34:aa:9f:25:19:c2:c8:33:e8:b7:1e:
f1:00:7a:cd:5f:dc:4a:35:f5:2d:0c:7a:32:ae:6c:c8:a9:81:
59:e6:c4:68:f8:d5:58:12:1d:c5:8d:c8:01:40:d4:c0:2a:27:
6f:e2:91:13:97:26:22:00:1a:cd:ed:1e:ff:ea:19:37:d8:00:
77:3a:78:50:a2:80:af:46:7a:9d:ef:56:55:8b:13:4e:6c:b4:
29:ba:fd:f9:cb:90:da:43:4c:20:f5:6a:6c:fd:45:46:d7:59:
73:a6:7b:53:a8:87:35:4f:8d:2f:7e:2a:b8:aa:f2:83:6f:30:
3a:12:e6:42:4e:26:1a:d4:d4:4e:07:32:90:33:e3:27:2f:65:
1a:cf:02:12:02:56:24:a2:ad:d3:c7:00:d0:9a:0a:9c:39:69:
8b:89:24:8f:f1:b8:54:95:7f:65:04:b0:de:34:94:a0:6a:49:
89:ab:9b:9e:24:c7:f5:33:41:cd:24:f8:cc:fc:e8:91:58:c1:
97:17:66:da:a7:bb:b4:45:ac:44:dd:9f:8f:d6:87:0b:48:fe:
71:cb:3b:49:9b:41:d8:47:31:93:7c:33:9d:17:d3:2b:ee:95:
48:fe:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:33 2025 by rpki-client