Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c3bf96c-c691-3476-8f6f-85850e875540.roa
File: 3c3bf96c-c691-3476-8f6f-85850e875540.roa (raw, json)
Hash identifier: VCdxF0JVM7R+xqYIz7/7bssYaDApxn1VVT9ytIrNe+I=
Subject key identifier: 21:9C:33:23:9E:9F:73:9F:C5:38:03:01:EA:1B:22:C0:D6:39:C7:E6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B346EDCB1A6DB050237C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c3bf96c-c691-3476-8f6f-85850e875540.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 76.19.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:34:6e:dc:b1:a6:db:05:02:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=59d4d9bf-2819-439f-a203-3b80fe82f576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:ce:56:ee:aa:62:c2:2d:be:ba:0a:3c:b7:
32:fd:9e:5a:41:4c:ad:4e:97:7a:21:c0:6c:d9:fa:
79:c9:50:e3:6f:2a:22:34:10:b6:e7:90:bd:52:7d:
12:f8:dd:63:f4:72:f2:18:9f:1f:ab:6c:3f:6d:c7:
5c:d7:eb:bc:48:ac:84:cf:7c:7e:46:b2:c8:33:62:
4b:fc:52:dc:c2:ad:a5:0c:ef:35:e7:d0:ef:89:e4:
07:71:54:10:48:cf:61:d5:c9:46:7a:37:13:f3:b7:
80:bf:ca:28:c8:36:b5:96:1f:e8:5c:a6:d1:db:d1:
44:6a:7b:e3:0f:9c:a6:d2:24:c4:a4:8e:4d:00:ea:
b1:a8:91:a3:1b:f2:08:7b:01:69:5a:ab:3e:ef:06:
79:3d:1d:b2:17:90:3e:e3:21:19:b6:bc:1f:9a:43:
68:05:85:53:0c:61:e1:11:3f:a8:2b:c5:28:91:05:
e3:f7:13:de:8c:c9:92:04:72:1b:65:f9:d0:d4:8e:
11:6c:a6:e2:f7:cc:94:89:5a:13:9b:08:77:1a:61:
6d:71:02:0b:19:d0:27:f8:19:ac:f2:53:f2:00:f5:
73:47:7f:b2:00:1e:f1:39:36:2f:2f:42:b7:0a:84:
ba:d2:51:97:03:d4:79:7d:ec:6e:a8:99:0f:dc:8f:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9C:33:23:9E:9F:73:9F:C5:38:03:01:EA:1B:22:C0:D6:39:C7:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c3bf96c-c691-3476-8f6f-85850e875540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.19.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:ca:a6:b7:8c:8e:f6:1c:de:12:82:fc:53:3c:fe:81:19:99:
cc:3b:01:7e:04:eb:a6:08:96:2f:90:2d:68:f0:ae:af:87:4b:
71:eb:a7:96:9b:a6:ab:1b:d2:5c:0a:14:b0:3e:68:d4:24:25:
2f:18:15:1d:76:73:5a:0a:d7:bb:44:92:df:3a:eb:82:36:f7:
7d:f6:e0:66:b5:52:b1:43:c3:b8:5a:3a:91:72:d4:82:73:a0:
55:e5:aa:33:ff:ba:0d:6d:8b:a1:a4:6c:1c:08:ee:6b:ff:a1:
a7:31:d0:99:63:64:c1:70:3b:13:d1:6b:8e:34:3c:7f:b8:dc:
65:f9:5d:94:00:39:93:4f:40:2a:a0:3b:3a:66:15:59:4a:32:
37:f1:d9:17:a8:fd:db:c0:44:38:75:5b:88:d1:a2:47:ba:f6:
27:00:59:01:e7:ab:d3:c2:cc:87:ed:15:5f:0a:48:49:2e:0d:
13:31:8b:8c:3c:15:86:a3:09:cd:11:82:b7:b9:48:1e:65:bc:
f8:dd:a4:7b:5f:e6:7c:3a:67:e1:6e:c7:62:da:71:43:eb:30:
83:82:a0:cd:62:f8:ef:5e:ff:de:b2:b8:c7:47:8c:f9:f0:cb:
9f:9b:d5:21:b0:ab:b9:41:ed:39:28:11:4c:29:6d:86:42:16:
31:67:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:18 2025 by rpki-client