Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bd8add0-9f65-3228-9b09-59d9fdc74537.roa
File: 3bd8add0-9f65-3228-9b09-59d9fdc74537.roa (raw, json)
Hash identifier: CnlUbNt1uW145zGPqXOZbCjkSCthy2avL6faENDBoxQ=
Subject key identifier: 12:A4:14:18:AF:A6:D8:4B:2D:82:7F:D0:D3:9F:D4:4D:25:74:AE:0F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848144034F1972803498ACD4180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bd8add0-9f65-3228-9b09-59d9fdc74537.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 76.30.36.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:34:f1:97:28:03:49:8a:cd:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=a8633d45-dd43-4a0b-9476-630e59151a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e2:41:90:d7:f7:24:6b:bd:77:74:b2:69:53:
0d:aa:9f:68:ac:27:46:ae:32:60:df:f3:54:d0:9c:
ec:dd:58:c1:dc:a6:55:39:82:85:c0:45:e7:82:e8:
99:e0:03:86:6f:ca:0f:a2:73:ce:d7:55:f6:a6:d3:
06:45:64:d1:ee:36:86:6e:d1:d6:2f:69:51:da:a4:
ea:ee:f2:8d:14:99:f5:d4:a4:f9:6a:c6:7c:e7:49:
6a:7d:de:a1:ee:77:7e:64:b4:79:57:1a:96:59:42:
29:49:f4:e5:af:cc:8a:bc:9e:b8:49:34:cf:f0:cc:
13:4c:6a:68:53:0f:7e:df:f1:8c:2c:8c:0c:eb:08:
f7:cf:20:8e:69:8a:a3:15:84:a2:55:33:cd:b9:3c:
1c:5c:d3:3b:79:06:fa:6e:ee:26:41:87:8a:df:9d:
39:d9:57:34:dc:bd:c1:02:5e:89:0b:76:76:f5:e9:
14:45:04:40:86:18:1e:db:ed:da:9f:12:44:07:6f:
b8:8b:65:df:08:94:98:da:0e:7f:ff:08:6b:b8:1b:
15:a7:61:eb:22:1a:4e:d9:d3:e6:9a:89:e7:91:8f:
46:53:64:76:6d:13:8a:ed:ba:13:76:fc:7b:b1:96:
1d:c8:78:47:be:90:6b:d1:bd:f3:71:c9:f9:5c:3b:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A4:14:18:AF:A6:D8:4B:2D:82:7F:D0:D3:9F:D4:4D:25:74:AE:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bd8add0-9f65-3228-9b09-59d9fdc74537.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.30.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:41:49:cd:88:3e:0a:7a:d4:32:61:47:26:04:b8:5b:c9:a5:
a5:43:2f:c1:8f:60:59:22:05:eb:e0:00:e6:fb:c0:fd:06:5d:
f5:2f:79:84:e9:43:09:b6:f7:5f:91:1f:32:f3:b1:64:d0:f8:
0a:61:7e:77:89:b0:fd:c4:67:93:6e:32:a9:71:a4:c4:7a:a3:
6f:fc:89:d2:59:6a:32:0f:53:6c:77:14:a4:ef:fd:53:a7:5f:
7b:94:8a:3a:93:7c:46:6e:4e:ff:ca:0d:53:c3:1e:e1:7a:c8:
c9:c4:09:85:73:de:c7:c1:79:b4:09:8e:54:c8:2b:ed:66:e2:
05:c4:f5:41:5f:85:47:8c:30:33:34:4a:07:a2:10:81:b6:cc:
91:48:97:83:91:75:a1:ed:61:16:ac:04:92:1b:2f:f6:4d:c0:
8c:a9:9a:7a:6f:aa:9c:67:c0:d2:95:80:4b:77:d9:42:ef:f2:
49:37:57:25:ad:aa:b8:b4:fe:4f:0e:77:6e:fe:aa:48:11:3a:
6c:eb:12:aa:aa:9a:8f:31:c1:64:d8:3a:92:ab:9d:af:2c:bd:
9f:9c:18:73:d4:7d:f9:0c:07:c3:85:ab:c6:bd:fd:f8:22:b7:
94:ec:95:d6:72:e0:d0:fd:8e:fb:f8:9b:e7:9a:cc:5b:e8:81:
91:28:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:37:13 2025 by rpki-client