Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91c3fbd0-a69c-343f-bf0c-7d22b7870ba7.roa
File: 91c3fbd0-a69c-343f-bf0c-7d22b7870ba7.roa (raw, json)
Hash identifier: PPx6MOEN5TdC0HgisRs0Rfmq/GWWQ/M284bcccbPE5w=
Subject key identifier: 04:C0:93:8B:17:02:C7:08:60:4A:1F:44:C8:5F:9B:89:A2:3C:2B:56
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C113E2A1073C2DA16411F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91c3fbd0-a69c-343f-bf0c-7d22b7870ba7.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 76.150.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:3e:2a:10:73:c2:da:16:41:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=a94d1317-e323-4e3f-9ab0-2988bb8ca04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:31:b9:93:ea:46:7e:49:ed:a3:89:46:8c:
81:5c:b5:10:66:25:68:c7:b2:bb:20:66:6c:88:8a:
5d:42:62:fd:a0:d0:b8:78:b6:3c:41:b1:79:00:47:
26:bb:ed:74:02:d1:6c:15:c4:9b:26:12:91:b2:62:
dc:ee:90:2c:06:87:99:5b:16:aa:18:b6:93:47:fd:
61:1b:c0:d1:32:5c:80:b6:f8:47:f1:e9:b2:22:31:
8f:55:be:a3:61:71:ab:52:35:b0:f6:38:3b:8a:3d:
73:dc:13:db:43:cb:37:56:94:ab:0a:ba:63:3b:94:
37:f7:e4:bd:4c:fa:fc:b2:22:a2:4c:28:e1:cb:be:
7e:56:6f:a1:a9:e5:e7:ac:5e:86:a2:b3:60:f4:c5:
94:48:f5:a6:e0:5e:22:dc:e3:f2:3d:cf:c9:6e:8e:
26:05:4b:b1:ad:00:41:90:59:94:85:34:a8:d5:ec:
ed:73:2e:5b:bf:fd:49:b5:98:f9:3d:38:ad:01:9c:
25:11:a7:4d:ab:e9:4c:5a:3f:9e:23:33:45:42:80:
b7:bd:33:34:28:47:b5:af:78:90:1b:bf:ef:4f:58:
6b:db:ab:ca:e6:2b:86:c5:1f:df:e3:60:25:5e:de:
ed:de:b1:cf:c4:08:e1:2e:51:ff:c6:e2:82:50:78:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C0:93:8B:17:02:C7:08:60:4A:1F:44:C8:5F:9B:89:A2:3C:2B:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91c3fbd0-a69c-343f-bf0c-7d22b7870ba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.150.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:d0:65:19:08:b1:bb:52:74:f9:dd:62:8b:fe:2d:51:55:b4:
bf:63:7d:1b:8d:83:5c:d4:40:c1:42:19:d3:a1:35:7f:26:04:
d4:70:7e:eb:3f:c4:4e:7c:5c:ad:1f:fe:81:62:73:e6:2d:13:
82:33:a1:7e:87:a2:b9:e7:42:00:c6:5c:9f:a3:39:a7:3c:25:
2f:2c:15:65:04:3d:fb:16:bb:21:e6:17:33:39:b9:05:0c:e6:
1a:f4:c7:15:ba:85:0b:14:c7:c2:ef:49:91:c8:02:c4:05:9e:
36:3a:14:65:8f:f5:1e:96:75:81:b3:5d:08:02:e8:1e:c6:d3:
14:49:30:25:f6:04:c3:70:d2:63:a3:fb:73:ac:f6:64:3a:06:
4b:e1:82:bd:00:17:f6:c9:1f:74:5b:05:98:a6:2b:50:68:24:
9f:f6:7c:47:cc:d9:52:7a:a3:96:16:8d:46:58:00:ea:bc:83:
15:f2:61:64:e1:ea:5d:f1:4c:55:90:7b:55:f5:bf:40:85:90:
b1:44:22:7b:31:f4:37:33:7c:28:cc:f2:ba:40:e9:ca:61:df:
01:7e:7d:da:1b:80:fe:09:95:e4:f5:63:84:6d:0c:5a:33:e8:
36:7c:c5:a1:81:30:1e:00:97:14:8e:26:d9:16:d3:e6:df:c8:
ec:bc:af:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:09 2025 by rpki-client