Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e73775-3ff5-3942-a407-3d637e1ff1ea.roa
File: a5e73775-3ff5-3942-a407-3d637e1ff1ea.roa (raw, json)
Hash identifier: bqhBIXedFTN9ZJU37R/iP0svLQsNveK63c0KcCh3fCs=
Subject key identifier: 78:65:F5:3E:98:60:02:BA:8D:89:2F:DC:23:16:9F:FE:DE:E3:D1:44
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10506BD7F3E17E3D7B5E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e73775-3ff5-3942-a407-3d637e1ff1ea.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 76.149.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:50:6b:d7:f3:e1:7e:3d:7b:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=9be86f1a-ffae-426a-8ca9-f2c805946f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:19:b1:71:2f:5d:95:dd:8a:d4:b7:57:12:
e9:a1:3e:68:3b:1c:29:0e:95:6d:15:60:85:0c:a2:
41:af:75:bf:18:13:0c:7b:f8:be:f5:8c:69:49:ad:
1d:fa:89:17:4f:ae:71:80:67:20:c3:51:a1:f1:31:
5a:81:95:c4:8d:95:4e:b9:19:f3:77:12:02:90:fc:
2b:b0:fd:cd:51:90:65:e6:d1:34:d8:50:1e:f2:e9:
72:0a:3b:28:43:69:26:96:63:34:36:7e:d0:75:3b:
42:8f:55:92:31:ed:bf:e8:0b:76:fe:e6:aa:12:4b:
4c:3e:7b:98:32:0a:8d:2c:47:4f:72:fa:ae:ea:94:
5d:d7:60:65:82:e5:be:2a:93:a7:ea:18:ab:27:1a:
5d:fa:1f:14:d4:57:0b:dd:d3:0a:ee:ae:a8:c3:cd:
a6:83:1a:17:74:a8:7e:25:3b:80:1d:da:2e:4f:4e:
cd:2b:3e:a3:70:6f:f3:f1:22:22:11:7f:6b:28:94:
4a:12:0e:be:e4:8a:9f:5a:c7:e5:bb:66:c6:d8:6b:
e5:21:cd:18:6e:3d:0d:7e:d8:e3:ea:5d:94:34:f9:
ea:95:e8:f8:bb:4f:3a:e4:66:61:ad:63:04:bd:e5:
08:c2:6e:a9:4d:d2:c0:40:3a:2c:d0:5f:25:df:34:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:65:F5:3E:98:60:02:BA:8D:89:2F:DC:23:16:9F:FE:DE:E3:D1:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e73775-3ff5-3942-a407-3d637e1ff1ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.149.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dc:30:75:18:ed:c5:87:14:bc:b7:f9:57:6b:5f:9e:03:dd:e8:
bb:c6:c8:ea:96:66:54:5a:31:1a:8b:89:75:3c:82:1f:00:33:
59:19:e2:04:6b:91:c8:aa:98:42:cd:38:31:6d:aa:b1:c0:b6:
ed:aa:a3:78:b1:fc:1b:2f:c5:2a:45:26:fa:c7:e7:09:94:ca:
85:6d:b2:f5:3c:1c:dd:93:95:71:11:34:a0:42:e0:48:86:9e:
13:4c:56:29:b0:cc:be:62:19:93:6f:11:ae:99:9d:55:0d:f7:
7a:f3:5c:f8:f0:f2:a2:15:b2:09:c6:b8:5f:5a:fa:d3:2f:60:
5e:51:16:3b:9f:0b:d1:68:5f:b7:77:24:4c:68:5f:38:af:04:
d0:fe:85:67:17:19:8a:70:c5:ab:8a:7f:81:01:09:ce:41:57:
70:5f:d8:91:77:84:68:d0:be:38:95:37:3e:d2:4b:99:60:9a:
a5:22:14:ad:cf:dd:1e:7d:64:fa:0b:9c:5a:39:cc:de:c8:f7:
13:9e:1a:8e:5a:e9:08:40:f1:31:ed:57:b8:fc:6c:bd:e9:b3:
27:43:0b:dd:06:dd:5f:aa:5b:dc:f6:db:0f:51:87:aa:37:60:
9f:18:7c:0a:0f:93:35:95:5c:3f:a6:51:69:e7:d2:c6:64:2b:
4e:16:f5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:23 2025 by rpki-client