Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72c5ce3d-cda3-3a0f-9c4c-6b28af1cfcc6.roa
File: 72c5ce3d-cda3-3a0f-9c4c-6b28af1cfcc6.roa (raw, json)
Hash identifier: aBGaSLiQwRCVTdCZH+50PUTw17EVkvsRr+lvb0DsGnk=
Subject key identifier: 3D:C8:4C:8F:F4:91:D7:C0:43:96:54:1F:74:D4:9E:03:13:0E:42:C7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C14EB314B88CA7B3CF6C380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72c5ce3d-cda3-3a0f-9c4c-6b28af1cfcc6.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 76.21.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:eb:31:4b:88:ca:7b:3c:f6:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=cde9d48f-daf3-4615-8c96-b654ef9d3e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d4:0d:83:a3:b8:95:41:48:ac:4e:ed:bc:1c:
0c:53:a9:7e:97:e2:d5:b1:97:7d:8e:d3:03:3f:37:
fa:ae:1e:02:b9:1a:99:a3:a4:87:42:2b:16:b2:1f:
06:98:05:99:dd:9f:cd:44:75:04:c7:1b:ee:e1:9a:
18:2d:18:f8:a1:ff:35:88:c0:24:4e:bb:42:d6:1f:
d6:6c:d2:c0:d3:f7:d5:23:7e:dd:da:56:0f:ac:44:
7f:a9:52:e4:7d:a3:51:73:cc:91:3e:02:43:81:24:
6d:4d:18:5a:3a:9c:82:83:69:a6:22:47:c1:2e:d7:
03:4b:d0:10:90:5c:1e:de:77:69:1c:fa:4b:7d:cf:
9b:d4:15:a2:56:fb:06:ed:4a:68:95:64:08:ff:ae:
ac:98:77:97:02:20:92:fc:34:f0:e3:24:76:e1:2b:
04:8e:dc:39:cf:20:83:60:49:44:e6:84:88:03:d8:
85:21:f9:4c:8b:0a:e4:82:c5:9b:0b:b3:11:14:3c:
50:38:e5:c5:60:0e:59:56:f2:17:4d:17:c5:dc:bf:
57:ea:00:63:69:d1:35:c3:c6:f7:8c:ae:21:d3:2a:
72:d0:b2:ba:ea:7a:78:7d:c2:e6:39:2f:3e:48:37:
e1:57:42:fb:d1:a7:71:4c:66:28:f2:65:84:78:bc:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C8:4C:8F:F4:91:D7:C0:43:96:54:1F:74:D4:9E:03:13:0E:42:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72c5ce3d-cda3-3a0f-9c4c-6b28af1cfcc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.21.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:c4:76:e7:26:af:8f:43:e8:92:b6:f5:dc:e3:bb:50:41:17:
96:82:3d:67:1b:6a:c0:c7:cb:9a:7f:f0:f7:76:a6:bc:92:81:
0b:17:42:f4:ef:58:82:65:2c:fc:3e:db:6e:95:c7:5b:09:b4:
3f:03:09:24:2e:05:e5:e0:73:c5:a0:0b:2c:8b:28:45:66:e1:
73:2e:00:c7:4c:3d:fb:6f:db:d2:78:18:dc:c1:a8:1c:0a:5e:
38:b0:06:1e:f5:3e:88:11:f7:c2:39:71:9e:3a:2e:e2:90:c5:
5e:a1:2b:47:29:0b:28:01:b2:5c:fc:7d:78:5e:2e:3f:b8:1a:
65:c0:08:db:6e:9d:57:b7:5e:74:21:de:46:46:ad:82:54:a7:
e9:d8:89:28:a6:63:9b:2a:59:b5:0e:bc:09:09:68:1f:06:15:
1d:ee:9a:00:19:8f:7f:41:69:2b:a0:c4:b2:2a:df:85:56:36:
41:80:72:84:4a:71:a1:25:e5:97:8e:f3:86:73:ad:73:b4:5f:
ce:b6:23:c5:8c:5b:4e:25:6e:bf:cf:c5:3d:87:59:3e:1b:e2:
a7:d5:76:3a:9c:3a:e9:9a:f1:16:02:04:f1:f8:67:e2:8b:6d:
e8:0d:36:69:2d:d9:36:40:8e:82:d6:6d:d3:67:1c:69:83:38:
d1:e5:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:48 2025 by rpki-client