Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae8dc098-15a7-30c2-8cb1-ef7c84805968.roa
File: ae8dc098-15a7-30c2-8cb1-ef7c84805968.roa (raw, json)
Hash identifier: ODxJCJLk0LVVBYyM0ZgSJcI7XNuQbrYWpOnupBYrLew=
Subject key identifier: F4:E5:E3:AD:40:53:00:F8:E7:01:FC:5B:72:20:61:49:72:BB:7F:25
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11BB596FF689A296164410
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae8dc098-15a7-30c2-8cb1-ef7c84805968.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 76.21.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:bb:59:6f:f6:89:a2:96:16:44:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=d20c9363-08b4-429f-80cc-f0a09fb0739d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:8e:43:d4:e0:14:9b:35:c6:8d:87:d3:ba:
6b:c1:0b:6e:b1:71:3f:6f:6e:2c:ac:b6:4b:be:31:
71:a8:34:de:ae:0b:36:a6:a7:44:84:9c:68:17:8e:
f0:3c:e5:6d:46:4f:94:61:5d:b0:9e:2d:e6:fc:ea:
78:21:60:2e:41:d8:26:0d:69:d6:fd:97:f2:64:45:
95:33:91:2c:b9:a6:fc:84:9e:a1:18:ae:26:a3:dd:
ff:52:91:3a:5c:43:e6:ff:c3:b1:39:d5:4d:c0:b8:
b8:1c:eb:2e:70:4e:a9:b8:6c:f6:8f:5d:1c:4e:12:
89:6f:61:1f:3e:4c:11:50:e2:ca:71:8d:98:5b:54:
95:37:30:6e:b1:9f:b8:5d:d5:17:bc:10:6a:7d:d7:
80:69:d2:67:0b:5b:1b:f2:13:0c:0b:31:a0:b6:a9:
aa:95:68:6f:0d:65:a2:41:da:7d:bf:92:f7:89:17:
f2:89:ac:14:85:08:97:16:bb:cb:ff:67:05:3f:48:
e1:74:37:a5:ba:94:4a:82:89:3b:76:17:3d:30:30:
2e:3c:79:29:ed:a2:a5:f8:33:23:95:4f:24:82:a1:
b3:11:ff:f1:9b:f5:c3:62:38:e8:e3:1f:c1:a4:c2:
50:d3:9c:83:c6:86:25:d5:29:c1:c9:73:cf:ea:94:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E5:E3:AD:40:53:00:F8:E7:01:FC:5B:72:20:61:49:72:BB:7F:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae8dc098-15a7-30c2-8cb1-ef7c84805968.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.21.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:2a:c6:cc:88:41:b2:f6:24:a2:62:bb:b9:a4:15:6b:4c:48:
25:f1:c9:84:9b:b7:a2:c6:d5:98:57:b3:f1:e7:82:83:10:8f:
1f:ef:54:b9:c2:02:93:f2:03:88:a3:ff:ee:0f:dd:1e:04:91:
9b:6c:87:2e:52:48:71:eb:32:5c:57:65:15:4a:59:01:03:e1:
09:90:9e:e0:ae:5b:8d:26:53:62:e1:97:c3:c6:8e:9c:75:c6:
43:63:ea:a4:b1:60:9a:57:04:bf:dc:ba:b9:67:49:13:0b:5e:
c1:fc:ee:0c:7d:d2:0e:c5:93:5c:ed:44:06:33:17:f0:c9:2d:
fa:27:d6:58:12:08:e9:23:31:b0:08:73:29:ba:bf:59:6e:5d:
db:11:79:03:16:5a:45:f9:9d:55:76:fb:7a:ae:87:2f:70:53:
b1:0c:98:9e:fc:5f:a8:12:bf:5d:76:a5:c4:11:55:f4:67:65:
c9:95:a7:2a:0a:9f:18:04:02:9b:95:82:16:60:fa:e4:65:4b:
71:83:7b:2c:21:4e:10:6f:ac:87:7d:d4:bb:4f:ec:ff:ba:22:
05:c7:fe:c2:e2:c9:cf:0e:97:ed:88:94:44:3f:46:42:79:36:
22:8a:75:3b:06:28:67:8e:df:c8:f3:92:bd:90:79:01:68:55:
6f:5f:15:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:07:30 2025 by rpki-client