Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9577e64-b57c-37e8-b456-d549b2d0c7cf.roa
File: a9577e64-b57c-37e8-b456-d549b2d0c7cf.roa (raw, json)
Hash identifier: 1l66hqTI+fYxx1qdfwofgSrEtrzX7xyUvNE5nxNTmy0=
Subject key identifier: D6:67:32:3F:C1:33:B7:77:F0:B9:B3:C1:BF:63:A2:A8:88:D7:DF:E2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11E4EBFB9926A62B5E4540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9577e64-b57c-37e8-b456-d549b2d0c7cf.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 76.27.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:e4:eb:fb:99:26:a6:2b:5e:45:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=31a9462d-5f9e-41e1-b387-05ec6a764110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:47:3d:0d:b0:32:5b:80:b2:e3:64:00:ef:
63:00:41:a1:ad:b2:31:e9:bf:e5:b9:46:79:6f:f8:
cf:65:cf:99:47:b8:d8:cc:64:16:8f:71:73:9c:09:
b2:ef:31:51:35:22:31:0a:67:45:b1:fe:2f:7f:94:
80:a9:41:98:3f:e6:27:f8:9a:9d:00:ab:8b:f1:cd:
bb:34:f2:6f:4e:ba:09:08:88:fd:47:85:60:1c:29:
5a:b2:dc:ff:de:2c:57:4b:f6:f8:25:ce:20:b6:2e:
62:64:bb:46:05:dc:ae:63:ea:bf:40:e1:22:8c:b9:
98:fc:09:2b:c8:8c:c4:c4:ae:44:71:68:8d:00:71:
4c:80:74:c2:a0:e0:1d:d2:e9:32:24:04:3c:70:bb:
5b:09:7c:85:a9:a9:58:20:1b:78:3a:ff:93:e8:f0:
e6:17:3c:e9:99:09:f5:1f:4b:37:67:16:e0:7a:c4:
21:fb:77:21:3d:85:9d:f3:b5:10:dd:ca:66:c0:5d:
ca:60:ae:98:12:2a:86:a7:ab:8a:37:0c:d7:83:1b:
f6:53:ab:78:56:9a:96:52:a0:e9:21:3b:38:e2:82:
46:7e:09:42:1d:31:3a:1d:ad:d3:75:0e:cd:33:47:
b1:97:ec:95:29:be:f3:db:6b:b2:54:06:69:ed:1b:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:67:32:3F:C1:33:B7:77:F0:B9:B3:C1:BF:63:A2:A8:88:D7:DF:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9577e64-b57c-37e8-b456-d549b2d0c7cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.27.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:cf:f4:0c:db:fb:8f:5e:22:c6:3c:a0:1f:1e:4b:4b:d0:c0:
52:6e:01:9f:98:e9:bb:46:ed:64:af:9e:e2:c7:c6:8c:05:80:
0e:14:03:e5:dd:cd:08:18:0e:82:79:4f:a4:cd:48:40:d8:57:
8f:09:e6:08:45:d3:2d:6e:9a:2a:ee:7f:30:c7:20:02:a7:55:
63:38:d3:41:f0:c5:33:d2:9f:a8:5d:50:c6:5a:fd:e4:eb:5f:
2d:b4:d5:68:be:eb:c1:2a:17:e9:9f:a5:2e:65:1b:6e:60:2d:
9f:05:50:95:93:4b:f0:a8:66:19:92:33:70:cd:71:46:1d:90:
3d:97:f9:1c:25:01:ea:15:17:fd:c7:5c:9a:55:22:fe:89:72:
34:9c:28:45:a1:e7:a7:9a:24:a8:de:96:df:91:f6:0a:bc:e7:
8a:50:2f:28:1d:f0:46:65:47:31:8d:63:08:c1:4f:c0:bf:9d:
d9:f0:c3:68:62:07:64:16:f6:ef:c5:20:d0:63:41:09:76:67:
66:9d:22:29:fc:53:60:04:ee:ac:c8:ab:2d:b2:cb:ea:08:c6:
97:a2:4b:d8:51:17:8e:a7:45:a2:ff:18:61:6d:37:34:74:37:
c6:c6:5b:67:06:52:ad:b5:be:0f:8d:11:1f:f5:f3:42:cb:45:
3b:c6:04:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:59 2025 by rpki-client