Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40018dcd-894c-326b-9ce1-06f78b09b828.roa
File: 40018dcd-894c-326b-9ce1-06f78b09b828.roa (raw, json)
Hash identifier: AXqBq5bUxRiFlm+g7n5sy+g8xjyzPl2dO+p/SYYYaBY=
Subject key identifier: 89:21:A7:F3:A3:55:23:17:47:F4:6C:39:71:E1:4E:67:9B:D5:A4:57
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B79CA50C47CD28F070B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40018dcd-894c-326b-9ce1-06f78b09b828.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 76.112.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:79:ca:50:c4:7c:d2:8f:07:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=85de4987-0f45-4bf4-8fae-52f946da4b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:70:a2:7f:2f:42:5f:39:f6:f5:57:56:56:22:
78:46:34:a3:98:2b:1f:50:cf:75:a7:f4:9d:4d:33:
6e:33:1c:a5:b2:6a:f1:36:76:68:54:4d:a6:9c:db:
8e:73:53:b7:75:db:b6:f5:d2:17:c7:8f:92:de:c6:
49:b0:ad:da:9e:91:8f:9d:2c:7f:63:4c:5b:91:07:
0f:ce:9b:d6:b7:62:c4:1e:3d:e3:e4:cf:9d:f6:f6:
28:b7:1d:52:fc:e1:20:7b:f5:a4:30:e0:3e:51:5c:
b6:70:c4:ad:57:8f:52:26:83:2f:d7:d8:6f:40:e5:
81:10:53:c5:5e:22:57:80:dc:de:ba:71:6e:24:32:
35:55:50:15:f3:98:73:a3:47:2c:5c:5d:31:fa:f4:
4c:54:4a:57:f0:95:40:d7:0e:3d:d3:17:26:0f:5c:
97:3e:91:f7:da:ab:0c:06:d7:19:cc:38:c5:a5:be:
87:d6:6c:80:0c:3f:ec:de:7d:f1:67:5f:f5:a3:35:
48:8b:ec:41:f6:56:33:ab:32:69:d4:80:c3:98:f5:
88:c1:75:02:0e:e0:47:33:1d:f3:38:dc:79:c2:08:
34:4d:06:7d:5b:0a:56:f9:5d:a0:1f:d8:01:82:3c:
4a:83:17:f0:9b:02:31:13:39:b3:11:25:1c:e5:58:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:A7:F3:A3:55:23:17:47:F4:6C:39:71:E1:4E:67:9B:D5:A4:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40018dcd-894c-326b-9ce1-06f78b09b828.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.112.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:fe:df:1e:a8:e4:81:b8:56:31:9f:54:bb:0a:37:47:45:1d:
80:7a:38:99:29:84:d5:a5:f7:4d:2f:43:59:06:64:05:a7:8b:
24:4b:ab:22:cf:a4:dc:76:b2:fd:2b:ef:9c:53:8c:28:30:41:
0f:0e:d0:b3:e5:d8:01:a4:95:1f:49:4d:3f:72:5c:07:41:65:
5a:2b:78:5a:50:d7:2c:f1:1e:90:53:74:28:fb:e2:ae:66:a3:
46:d9:ea:08:af:1c:3d:95:6a:ba:db:ca:86:e6:d9:6b:45:4e:
33:35:b8:aa:c1:6c:f0:70:f4:01:00:35:61:de:a5:38:7c:f8:
e5:ec:1f:ad:91:7a:0f:55:56:8c:c3:62:d8:d7:1a:57:17:03:
9e:f1:ec:97:e1:d1:df:d6:9e:b5:87:96:46:7d:ca:80:d2:2c:
8b:00:aa:52:87:72:e3:8b:f8:df:90:40:dd:26:1f:39:1d:6d:
67:20:c6:3e:4c:35:9c:99:95:ec:f3:08:d3:bb:4c:f0:24:ac:
35:49:00:d8:e9:8a:53:c8:c5:4f:7e:54:24:2f:f3:3a:f0:f2:
b0:96:04:48:da:86:3a:88:38:a9:76:64:4f:93:c1:5e:79:b1:
e5:cd:70:76:33:7b:62:81:9e:6b:74:7f:0b:e6:f7:77:34:c4:
61:53:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:20:20 2025 by rpki-client