Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f5946e1-88ec-3bb6-8b3e-eee7cc3d5886.roa
File: 3f5946e1-88ec-3bb6-8b3e-eee7cc3d5886.roa (raw, json)
Hash identifier: fb4uefe5GnjYpDWfv+9fWFKJ26vsvh6omheoxCUfAVI=
Subject key identifier: AD:05:55:FB:A0:A3:BC:8B:1D:88:43:DA:11:A7:9A:91:95:A3:CF:68
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12F7F528FDA5B3B972C9C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f5946e1-88ec-3bb6-8b3e-eee7cc3d5886.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 76.150.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:f7:f5:28:fd:a5:b3:b9:72:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0212de2e-4911-48c1-a24f-a63f22e3ddfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:91:fd:de:4a:e2:5e:27:3d:9e:e8:2f:9e:
a0:9a:e6:bd:e1:ea:49:fa:e3:fe:7b:b7:bd:2d:a0:
2f:15:da:eb:2d:a0:11:14:84:7f:e9:62:cb:db:4e:
dd:52:9a:ce:a5:78:9a:f6:87:7d:4d:f0:60:79:84:
11:4e:71:15:1f:62:56:d1:4e:8f:46:a0:36:05:2e:
2c:69:a6:08:ff:46:4d:8e:4f:61:00:58:e2:20:30:
36:bb:4e:26:91:9a:01:00:df:d9:a8:71:6f:b6:17:
a8:28:0d:51:92:bd:a8:5b:03:b0:26:ae:be:64:87:
69:26:71:a5:cb:d2:90:7a:8c:01:0b:bb:ee:d2:65:
40:7b:dd:b0:f3:b2:e2:b3:c5:15:74:27:bb:5c:2b:
8c:de:e5:d3:86:55:e8:b1:84:6c:7b:d0:d6:4b:5b:
01:93:c7:9e:31:3d:0d:37:53:4c:28:2b:19:89:8f:
3c:7a:03:e9:fc:a9:a8:fe:02:12:58:65:ee:81:6b:
06:b5:28:21:df:46:72:90:b5:f8:30:50:a1:36:39:
9b:66:39:d3:37:33:6b:45:e8:6e:92:2b:ec:60:0c:
e5:50:8e:4c:ae:27:0f:09:00:f3:d8:33:e9:7a:a0:
94:92:be:3d:17:02:f9:f8:63:a1:13:53:95:10:cc:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:05:55:FB:A0:A3:BC:8B:1D:88:43:DA:11:A7:9A:91:95:A3:CF:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f5946e1-88ec-3bb6-8b3e-eee7cc3d5886.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.150.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:b3:08:f9:ae:2a:7c:cb:7f:a2:2e:25:cf:48:29:e6:ee:81:
39:eb:24:84:89:33:c3:6d:91:58:bb:3c:98:2b:ff:05:71:0c:
7a:e3:a2:82:61:63:71:14:3c:fd:eb:18:74:85:ed:a3:21:b9:
18:78:37:d9:51:f9:df:de:08:a0:64:62:2e:9c:5f:e5:1e:aa:
a8:5d:cb:fd:d8:17:d7:8d:b4:22:4a:26:21:9b:12:5a:45:73:
5e:b6:ce:91:23:88:55:19:29:3d:fa:4d:00:59:8e:66:34:e3:
a7:c1:06:5a:ee:97:de:cd:60:be:f3:9c:5f:36:e0:31:db:58:
a5:98:c5:67:df:d5:83:58:47:e6:11:48:a5:00:36:a6:23:4e:
7f:9a:9d:10:c8:d9:33:6f:8d:75:01:2c:20:9d:4a:00:53:c7:
27:69:7e:04:1c:ec:5a:f4:54:ba:f6:8c:a5:fd:7c:a0:00:82:
da:95:2a:29:f8:1e:96:1d:ce:bf:5b:a6:85:ab:f7:7d:95:ee:
ad:63:fc:95:54:4a:33:51:d1:df:07:61:27:ef:ed:f9:54:83:
f7:70:e3:66:ce:f1:b8:e2:11:c3:bf:24:b0:13:84:80:88:4a:
7a:66:8b:74:5d:5c:37:cc:d7:88:ed:96:ed:fd:25:79:46:3b:
e9:9c:02:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:53:50 2025 by rpki-client