Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42262a3e-a49e-3cd0-8861-76cae60f8435.roa
File: 42262a3e-a49e-3cd0-8861-76cae60f8435.roa (raw, json)
Hash identifier: Dbi7pU/ZkXoJ1xZe4uXiWHnAza1ytVg1t9YqC8jSjMA=
Subject key identifier: B8:07:85:8A:CE:2D:AF:D2:0C:13:53:F1:7A:84:7C:66:A5:8B:94:78
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584840E5BB19B35681EB08F3D7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42262a3e-a49e-3cd0-8861-76cae60f8435.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 33659
IP address blocks: 76.116.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:bb:19:b3:56:81:eb:08:f3:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=3713b447-c87a-4b87-8fd9-4be2b84944c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:e0:0e:8f:31:9f:4c:82:e2:b3:5a:9f:8f:
b7:32:d0:9e:24:11:50:5e:7c:dc:e4:38:fe:ed:2f:
68:84:48:22:9b:82:a2:60:7f:7d:60:99:81:2a:6e:
61:3c:2e:de:ff:78:07:27:02:ab:44:f9:01:6f:31:
cc:66:1f:82:c5:34:8a:6a:3e:2f:91:45:1f:65:1e:
ca:62:b6:8d:d9:27:25:2f:4d:ba:3a:74:1d:f7:9d:
82:84:a0:a5:71:a6:4b:3d:0a:04:0f:bf:ff:5a:14:
00:7d:d9:f0:27:98:55:48:9a:7f:54:25:67:01:45:
69:c7:2e:31:ce:98:02:d9:97:b8:bb:e4:71:e9:d8:
1f:10:64:7d:42:09:01:85:94:cf:44:4a:7d:93:2b:
c6:6c:d4:ae:35:0d:75:f6:d7:6d:cc:ea:3e:77:d7:
4c:f6:82:3c:3f:fe:d4:e8:09:3a:07:aa:25:89:d8:
3b:44:97:06:3a:30:26:dc:fa:11:a4:6b:e4:74:ce:
4e:77:0b:c9:16:37:28:8c:4a:4a:87:d0:b6:90:1f:
2f:56:66:84:64:f3:de:32:31:95:ec:96:c2:ac:d1:
5a:3d:41:36:ed:8d:df:15:f6:e0:fb:bf:95:3f:b3:
61:f7:f6:08:dd:8f:e8:8e:3e:27:5e:40:c1:d3:46:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:07:85:8A:CE:2D:AF:D2:0C:13:53:F1:7A:84:7C:66:A5:8B:94:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42262a3e-a49e-3cd0-8861-76cae60f8435.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.116.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:40:12:e1:03:84:fd:19:8f:08:b9:3c:09:8f:2a:18:24:98:
f3:a2:a8:63:41:b9:4f:04:cf:1d:e8:72:84:25:75:8a:8e:be:
23:4c:3a:3f:24:ea:ae:7b:cd:8c:5f:e4:72:b3:6d:e6:fa:48:
cd:a6:cd:f7:f0:74:2a:de:05:14:be:ed:5f:28:77:c6:e6:58:
98:70:13:d2:35:b4:56:ba:bd:11:f6:f9:b3:4f:cd:28:4d:a6:
be:1d:b4:93:fe:60:17:58:b1:c9:88:62:b5:36:89:e0:fc:1f:
b7:9c:2f:d4:14:5b:9e:c2:e0:a3:2b:66:e1:cb:2c:87:75:1f:
0d:d6:d4:cd:60:37:ad:27:f0:03:ae:b1:dd:b6:59:db:fe:9a:
7f:54:28:10:7a:72:bb:e9:c8:38:2b:79:7b:23:30:4f:d7:4d:
78:3f:7e:bc:a1:cb:c9:6e:ff:eb:4d:b4:2f:42:a4:c5:1d:68:
09:d1:38:d5:8b:4e:87:33:df:2d:7e:5d:21:73:c0:cc:e5:bf:
cf:29:e1:3c:87:79:25:ea:27:ba:93:1b:74:b1:98:d4:67:1c:
fe:8d:4b:97:0a:e9:6f:41:cc:17:3d:6b:4d:16:63:4d:05:5f:
c0:f7:cc:72:7f:75:83:5c:8f:d5:66:a2:09:f8:ac:fa:79:fd:
a8:11:67:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:50:32 2025 by rpki-client