Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0cf562a-479b-31b4-ae2c-bc4baede09b3.roa
File: a0cf562a-479b-31b4-ae2c-bc4baede09b3.roa (raw, json)
Hash identifier: YvEPj8oO9g+YY4aHSQ4EvlfeT1gTU+7ESOO8ZM1WC6k=
Subject key identifier: 73:DA:F1:31:F2:BE:5B:8F:FA:FF:79:3E:7F:F2:09:90:0D:18:16:6B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11BA272AE9F882971D06C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0cf562a-479b-31b4-ae2c-bc4baede09b3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 76.133.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:ba:27:2a:e9:f8:82:97:1d:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=561b2233-7f14-4a09-bf59-97a152082b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:92:cd:6f:05:f5:96:89:ee:92:e1:70:33:
94:36:3d:8a:a9:30:9e:9f:5d:08:55:61:62:cc:88:
5d:05:01:97:24:6a:fe:b7:8d:0f:ac:fe:f7:64:69:
a3:bd:e8:59:35:6a:7d:f6:d3:81:91:da:f2:b7:8a:
7f:4b:f5:fd:28:25:a2:8e:00:d5:70:89:34:e7:34:
49:0c:f3:45:cd:13:73:bd:1e:b8:2e:c0:b7:00:95:
f8:8b:60:63:8e:2f:25:52:8e:ef:e8:23:3e:8c:0b:
9e:f8:9a:8d:b5:cc:43:eb:a8:fb:a7:20:cd:86:b9:
74:a5:79:56:63:79:b4:6e:e0:e7:06:aa:59:13:fc:
b4:1e:e0:2b:7e:01:b6:26:af:f6:06:57:29:ca:f6:
7c:42:7c:07:ae:ea:9f:b8:11:2d:19:b9:01:a4:7d:
91:df:07:5e:1e:2b:bd:9f:1f:bc:93:3a:b4:37:4b:
12:06:aa:fd:f9:76:a2:be:63:b1:43:d4:65:c9:9b:
a7:b3:af:26:d3:9b:8d:1f:1f:e6:89:d6:0d:6d:9e:
2b:a6:92:fe:fc:cb:41:7c:e3:8c:cd:d9:49:81:17:
db:f8:ef:4b:a7:04:a9:62:1e:77:e6:e1:42:72:f6:
d6:a8:01:c2:7d:fa:7b:b3:b7:55:d1:90:99:20:84:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DA:F1:31:F2:BE:5B:8F:FA:FF:79:3E:7F:F2:09:90:0D:18:16:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0cf562a-479b-31b4-ae2c-bc4baede09b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.133.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:7a:6f:7c:53:cd:39:65:d0:78:c5:a5:eb:0c:bb:33:bb:c7:
e9:3a:17:21:91:70:61:79:68:11:cd:b0:ae:07:39:cd:ba:ab:
c2:95:e1:3c:22:38:eb:8c:4b:33:9f:7c:8c:c4:99:fd:83:fa:
b9:15:17:67:eb:3e:1e:73:4b:21:cb:55:e7:ad:03:86:e5:74:
74:bb:fb:bc:c7:4f:12:d0:c0:9e:14:e1:a8:ce:c2:1f:5f:d7:
47:d6:88:82:18:64:3f:c7:7c:78:8a:85:01:20:f7:fa:63:28:
55:8f:47:18:22:2c:fc:37:6f:f7:4e:02:af:d7:97:14:35:5f:
85:50:43:df:f3:21:ca:b6:e3:ea:e9:23:10:b4:d4:29:b2:5a:
f8:df:aa:4a:7d:f7:b2:35:20:13:9e:a4:dc:87:0f:76:36:13:
dc:92:5e:53:82:0a:1d:3d:c6:ed:4d:48:a1:1c:a3:12:6e:f5:
eb:c5:db:e7:25:d5:24:ae:de:5d:f8:a9:8c:f3:01:e5:c4:f9:
bb:dd:f9:ea:cb:83:45:f2:d3:f5:af:66:b2:11:b5:60:43:bc:
8d:25:60:f4:35:b4:cd:a8:94:12:9f:e9:d1:6e:da:a5:79:ae:
54:0c:bd:15:f8:1b:ab:28:a6:50:67:c6:f3:1f:a2:e0:68:4d:
0d:3d:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:45 2025 by rpki-client