Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaf0be30-b699-3e8d-ad1b-4c9fc9cd6930.roa
File: aaf0be30-b699-3e8d-ad1b-4c9fc9cd6930.roa (raw, json)
Hash identifier: AH3eIA2YEgex0kFG1AKoUqS50nUZimKP5Fwc9YK0Ouw=
Subject key identifier: B8:00:71:CF:D4:33:F6:CC:EE:48:DA:B9:E3:19:BD:0F:13:EA:60:9B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1050FDA2A31B0E98E74ACC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaf0be30-b699-3e8d-ad1b-4c9fc9cd6930.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 76.149.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:50:fd:a2:a3:1b:0e:98:e7:4a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0468160a-85c1-4538-a085-55f06d79e8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:e6:29:c7:61:0a:92:03:dd:dc:b7:0e:06:
04:76:97:43:72:ed:60:cd:3b:85:d7:54:94:d3:ac:
f5:d1:53:d5:1e:74:0c:5e:0c:4b:26:af:2f:2d:f1:
2f:da:8b:e9:4d:c8:af:48:5c:9c:ee:14:5a:bb:2a:
cd:68:ef:eb:b8:75:34:cd:14:66:70:94:3b:a6:64:
f9:ec:8f:98:11:ab:df:cb:c6:78:eb:42:65:03:45:
b1:46:24:8b:58:14:2b:64:f6:27:3d:10:ce:8a:a5:
cc:8f:86:8c:e4:81:b8:1e:57:b4:d7:dc:14:f1:3a:
df:8c:92:65:a9:77:b4:a0:5e:04:19:c9:dd:78:15:
44:99:37:41:8d:17:6b:92:29:41:a0:8a:96:40:8e:
a4:9c:13:ac:3e:44:0a:cf:bb:96:cc:28:60:b9:28:
eb:3c:1f:20:fe:9e:a3:56:85:e1:4f:a2:ac:07:86:
d7:b3:59:44:a6:08:fb:38:0e:bc:ac:db:82:ce:41:
7d:13:43:59:bc:0f:e6:ab:94:f4:df:de:35:48:2f:
84:39:5f:90:03:cc:c5:65:a0:f3:a5:66:32:fd:59:
6c:22:16:89:31:9e:67:98:04:68:37:12:47:55:bc:
aa:68:56:19:eb:7b:37:44:95:58:39:4a:83:8b:51:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:00:71:CF:D4:33:F6:CC:EE:48:DA:B9:E3:19:BD:0F:13:EA:60:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaf0be30-b699-3e8d-ad1b-4c9fc9cd6930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.149.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:c7:61:f2:ef:46:86:61:c5:c1:ee:a9:14:c1:4a:78:74:3c:
ed:8d:b1:9c:1a:9d:12:7e:a8:27:96:f2:58:70:f9:2a:46:57:
dc:74:62:de:de:56:a1:46:e8:b2:fb:60:e1:db:db:a5:e7:9d:
44:e4:2b:4e:bb:bd:1e:81:5c:5b:3e:a4:c6:57:44:e4:94:f6:
e6:9c:c8:3b:44:b6:1b:0f:48:52:bc:78:70:58:22:93:49:1f:
df:ff:52:5e:fc:da:ed:19:70:f4:88:3d:44:d6:eb:8b:38:1e:
7f:ea:ea:38:01:d2:34:50:dc:77:19:01:f9:c5:f7:73:dd:78:
bb:16:af:9b:b0:ac:f7:06:02:90:ed:3f:8a:e6:2d:35:48:ba:
d3:17:20:e9:4f:0b:a9:3f:bd:d2:8c:23:dc:50:31:82:f2:27:
52:cf:29:e8:eb:78:33:06:1c:61:1d:54:bc:0a:6a:95:a1:66:
8e:fe:bb:38:25:fa:bf:d6:37:08:5a:60:d0:7b:c3:28:3a:58:
18:f8:d4:48:34:3c:2e:33:13:2b:98:19:f8:bf:36:56:ad:1e:
5a:7a:fe:0a:ee:d8:f8:56:f9:1e:96:00:2b:c2:d0:3e:89:0c:
8e:9d:8c:44:a1:66:d9:8a:d3:df:46:4a:27:73:56:70:b2:63:
51:8e:a8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:12:09 2025 by rpki-client