Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86f5adf6-7b97-3ccf-8a03-b55d6581c8e9.roa
File: 86f5adf6-7b97-3ccf-8a03-b55d6581c8e9.roa (raw, json)
Hash identifier: GFvgAdWeCJFXWNPgzT+1yd31knFB02VUNy4krbl4gJE=
Subject key identifier: 95:E7:ED:8F:E0:14:6E:DB:3C:61:5B:6A:71:9D:E8:A4:6D:2E:FA:72
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143ED9BA5AA4525463076400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86f5adf6-7b97-3ccf-8a03-b55d6581c8e9.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 76.24.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:d9:ba:5a:a4:52:54:63:07:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=a12fbfb3-e552-4439-882b-7f0ec9051a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4e:6e:cf:3c:13:c4:43:e3:61:6a:28:74:f0:
76:57:55:f3:38:b9:32:4b:c6:bc:c4:f2:3a:95:c7:
51:8a:83:63:66:ef:ff:dc:fe:6a:1c:59:93:70:6a:
94:10:c5:e9:6d:16:c9:d7:e8:92:37:23:45:a8:8b:
b8:77:e9:5c:59:c3:74:3e:ab:c4:69:f3:15:bd:0e:
e0:e9:92:a1:45:fe:36:5c:4a:38:36:e8:b3:81:00:
44:ea:17:b2:38:7e:bd:22:3d:0e:3a:0c:bb:e1:d8:
7e:aa:11:22:42:52:a5:04:48:e1:f8:bc:ee:3c:59:
3a:42:45:88:b5:03:57:50:a0:18:fc:8c:f7:3d:a9:
e7:8b:6a:b9:b0:27:8a:bf:51:6c:a4:82:3d:1a:71:
e1:d0:68:7e:ab:5c:34:7e:9c:e3:3e:be:c3:c9:d9:
35:ac:49:b1:b8:70:54:05:9f:d6:73:6c:6d:3a:34:
76:22:3b:32:26:3a:a2:75:a1:c8:55:57:a0:96:4b:
b7:c2:55:9e:30:44:d6:27:5f:cf:fe:61:4a:b8:65:
0a:e8:57:c0:a6:08:73:de:3a:6b:f7:16:f7:32:c1:
0e:a3:de:82:be:b8:ab:69:9b:db:d1:e9:a4:6d:e5:
98:3e:2a:bb:29:53:57:94:f0:fe:9c:06:35:6a:7b:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E7:ED:8F:E0:14:6E:DB:3C:61:5B:6A:71:9D:E8:A4:6D:2E:FA:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86f5adf6-7b97-3ccf-8a03-b55d6581c8e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.24.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:46:67:fe:02:f6:a1:a8:ab:6f:3d:67:18:8a:36:3f:e0:98:
41:5b:cb:0f:b5:03:c4:d1:b9:9b:f0:0f:a1:35:fe:0c:6b:81:
96:53:4e:9d:aa:67:e8:b3:30:0a:39:c0:ea:d7:3b:16:91:b6:
b4:27:e5:a8:98:f3:0f:12:71:b9:e8:13:88:d8:6d:84:e9:2c:
cd:30:90:08:6c:6f:60:d8:b8:9c:6c:d8:f7:54:a2:93:d0:9e:
38:3d:6d:d8:1d:36:ec:61:ed:10:26:43:00:3f:b7:f8:2e:ee:
ef:46:8f:d1:ff:06:96:cd:0a:6d:f3:83:01:9f:c1:d2:ac:34:
bf:7a:76:80:aa:e6:e6:b3:5b:68:6d:97:8f:f8:22:db:38:0e:
86:7b:cc:ba:88:75:fb:4e:e0:82:b9:33:28:a4:38:a7:0f:8b:
fc:e1:fc:8a:e7:6d:9a:3d:92:0c:71:c4:07:40:f1:33:96:43:
02:68:b1:10:96:09:4a:68:76:0b:84:04:3c:40:37:60:31:b8:
84:9a:3f:81:39:1e:82:5d:72:b3:b2:1f:51:79:e3:04:d8:40:
f4:f7:15:75:94:0d:db:ef:ae:a2:1b:ed:0a:7b:20:39:06:03:
6d:5f:a1:45:57:89:b1:04:4b:8c:36:44:41:3c:83:88:ea:72:
86:d6:d3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:57 2025 by rpki-client