Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40301393-436a-3f5f-b0b5-89556fd754c3.roa
File: 40301393-436a-3f5f-b0b5-89556fd754c3.roa (raw, json)
Hash identifier: VFe2HbV0IoLBwuhfGqaMdPYmIL81t/2qf7TWOUBMySQ=
Subject key identifier: FC:8F:B8:AD:26:57:5D:AE:19:9E:70:F5:42:40:A5:5C:F2:43:05:15
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11B3DC98AE86706A0AA280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40301393-436a-3f5f-b0b5-89556fd754c3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 76.103.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:b3:dc:98:ae:86:70:6a:0a:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=88925a7b-77f5-4fb1-9104-d16a0127abba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:ef:5d:67:68:ce:18:76:88:8f:ef:08:4b:
97:8c:79:d5:29:c0:03:b8:ee:ca:55:a7:6b:f9:e0:
4a:ec:3c:05:d7:05:81:7e:88:f7:a3:3b:62:27:6c:
47:18:24:3e:74:33:3c:82:dc:90:1d:c8:12:43:62:
9c:34:d9:9f:72:93:bd:e5:df:a6:a3:35:fb:18:69:
36:f1:39:c9:43:1d:4a:2a:c1:0b:8e:cf:3d:06:17:
8a:60:cb:f5:a1:4d:1d:e2:9e:59:3b:e8:74:87:4a:
34:fd:6c:4a:46:cd:65:76:3e:a1:a3:b6:4b:7a:7e:
09:6d:a8:20:fa:c1:a1:70:dd:d9:29:ee:1f:28:b5:
eb:59:69:d5:7f:b6:49:01:aa:ba:26:32:e2:cd:23:
9f:15:1b:e2:99:27:fc:f5:1b:24:78:f0:8d:3f:04:
44:ec:94:ec:40:23:c7:1c:55:30:f4:b8:bf:be:a4:
21:d4:6e:6f:fd:54:61:3a:e3:8c:e1:79:43:df:ae:
fd:07:00:fb:1f:df:8d:46:e4:25:61:d2:11:c5:a4:
9f:d3:c9:bd:c2:ef:30:a4:77:8b:5b:3e:7e:9a:c1:
89:aa:74:9a:a1:16:ec:61:90:70:3c:29:78:d8:63:
41:77:9a:23:6a:cf:d8:a7:fa:e6:e8:f5:64:18:3b:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8F:B8:AD:26:57:5D:AE:19:9E:70:F5:42:40:A5:5C:F2:43:05:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40301393-436a-3f5f-b0b5-89556fd754c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.103.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:2a:5e:d6:d3:73:7e:02:da:c0:17:e0:51:10:b2:65:9e:f1:
eb:5f:7b:7b:60:b0:e0:68:c0:ea:3f:8a:0e:4b:6a:13:30:92:
64:c0:d1:dd:ac:76:e7:b1:51:57:b6:da:fb:13:47:e6:ba:2e:
a9:70:d9:82:e9:f7:bb:cc:58:30:ae:66:bb:13:2b:c9:f1:c6:
7d:6f:6c:28:90:2d:f3:4f:fe:ab:37:ef:d0:5f:8e:91:a7:81:
0d:97:57:63:7a:dc:ae:52:f5:d6:45:07:d1:d5:a2:8a:73:7a:
81:5d:cb:84:a2:e7:73:d7:be:f5:71:9e:8f:be:43:7d:13:37:
af:0f:d8:87:56:44:e3:ac:49:af:93:c7:33:75:5c:4d:a4:6a:
77:30:4c:1f:0c:e0:bf:59:28:91:69:db:aa:81:ab:96:10:80:
22:76:96:0e:71:44:90:f4:74:93:78:bf:87:46:3d:3b:9d:fa:
fb:78:38:30:33:aa:c2:b2:60:2e:c7:d6:2b:7d:55:d3:e3:69:
2f:74:90:9f:84:55:90:71:bf:5d:1e:00:34:b6:b3:e3:55:14:
1f:96:9b:d1:32:b8:29:73:8b:e5:37:10:b8:b6:3c:50:e5:85:
ab:20:23:c9:ee:b7:98:6d:74:b7:01:41:2c:eb:ab:e3:e7:35:
66:5d:6c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:26:37 2025 by rpki-client