Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5100ee57-fbd1-36e8-a3e6-2f4be4aa2ce3.roa
File: 5100ee57-fbd1-36e8-a3e6-2f4be4aa2ce3.roa (raw, json)
Hash identifier: WuuIqLFWwWrUFzWbCTnPtyJ7ojWVxfKdFjRB/x8MBFY=
Subject key identifier: 4A:03:02:4D:E6:A4:AA:B4:A0:B2:1D:9B:AA:EB:92:C9:FD:D0:50:17
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143ABA22E67B593DC9923E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5100ee57-fbd1-36e8-a3e6-2f4be4aa2ce3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 76.138.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:ba:22:e6:7b:59:3d:c9:92:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=e1fc106f-3aaa-4bac-8cc1-e2291084d483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:16:25:38:b1:d0:5e:8f:c8:26:6c:12:0e:
f5:6a:aa:59:e6:be:02:ff:19:a1:b8:ba:38:42:08:
73:90:5d:84:89:83:9b:d1:0b:4a:a4:65:6e:05:9e:
b4:8b:61:05:bf:87:d0:1a:ed:84:c6:33:b7:a1:5c:
93:c9:c6:63:57:3a:56:ab:d9:04:f2:e3:f1:05:a0:
8f:54:75:9a:22:93:d7:df:e9:50:53:71:65:34:a6:
e5:9a:82:b8:a5:84:47:75:39:63:5c:bc:d5:bb:50:
5f:77:de:9a:67:79:aa:ca:61:de:51:75:30:dd:e5:
10:a5:55:b0:90:eb:af:3e:7c:48:6f:62:0b:68:91:
14:68:7b:d1:9e:ef:0a:e5:25:86:1f:53:6d:af:20:
cd:80:3a:50:33:9f:64:67:40:56:2d:0b:cc:ea:c1:
e8:f5:b2:83:33:d0:d0:7d:05:0a:54:b3:d1:39:52:
f5:cb:ae:3d:45:30:c7:76:17:c3:d9:49:28:34:5d:
71:09:88:c3:c9:15:19:f1:8a:ab:aa:ff:1e:ee:bb:
a0:48:7a:df:51:89:ce:65:b4:cc:cc:bd:fc:a5:ef:
ff:da:9f:58:50:d0:db:5f:d4:fc:48:09:eb:c9:6d:
27:49:06:b8:0b:3b:af:17:06:2b:f8:69:b5:db:06:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:03:02:4D:E6:A4:AA:B4:A0:B2:1D:9B:AA:EB:92:C9:FD:D0:50:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5100ee57-fbd1-36e8-a3e6-2f4be4aa2ce3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.138.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:87:fb:fe:af:d0:9f:57:3f:24:a1:33:a4:30:af:27:a9:1b:
88:46:52:f5:f3:5a:89:f3:b5:a8:50:98:6b:b6:ae:ec:c1:01:
71:cc:59:66:33:a5:13:2b:ad:5e:09:88:e3:b0:a9:90:5e:f3:
6b:10:ba:d6:4f:d3:93:ce:df:22:4e:d0:41:0d:ff:b5:ce:1d:
11:72:67:21:5b:e7:1d:34:99:58:37:42:73:c1:6d:61:ca:07:
5e:ce:ec:c8:eb:e5:f5:ba:78:55:24:e1:d0:3b:f3:dd:eb:bc:
e9:f8:ac:b3:f1:02:09:1c:32:46:fe:e4:0e:6d:21:13:e2:04:
d1:74:37:0d:69:46:ea:82:74:b9:1d:df:23:5a:5a:e3:25:84:
96:44:a2:32:92:5c:6d:cc:b7:a0:28:b5:24:94:b3:a5:aa:39:
1f:46:86:6f:3a:23:b2:b0:58:57:26:09:bd:a9:96:ae:15:ee:
0a:0f:02:53:e1:9b:bb:4d:d0:32:b5:17:2b:1b:49:f6:50:73:
52:af:81:3f:fb:a0:14:33:71:65:7f:84:fe:ac:a8:3e:5b:3e:
e0:f8:e1:f1:02:be:31:52:ce:d2:3f:ca:8c:50:44:64:30:f1:
4f:da:ab:dd:91:3e:9f:bc:ae:d9:24:ce:db:d7:98:21:01:bf:
6f:f9:d0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:24 2025 by rpki-client