Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b20adb6b-d1b2-3d99-9d07-b25aa8ae5d68.roa
File: b20adb6b-d1b2-3d99-9d07-b25aa8ae5d68.roa (raw, json)
Hash identifier: tQVhZPO87A/p6aqgl8sSyTpLBsRSwZd3DW6w57GGTcY=
Subject key identifier: 4A:5C:90:9A:63:57:91:1D:DE:A6:74:FC:43:0B:87:F0:D7:94:E8:64
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584814402AC29513FC4B2E7D9570
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b20adb6b-d1b2-3d99-9d07-b25aa8ae5d68.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 76.143.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:40:2a:c2:95:13:fc:4b:2e:7d:95:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=4aa2807c-9eff-4748-8ff8-f298f83402af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:03:d1:29:a4:3f:54:fc:c7:5c:c1:99:81:3a:
e6:4e:e7:8a:5f:ac:6a:f4:8d:4f:7d:a3:fe:8e:33:
c3:07:58:df:90:13:c9:12:04:b5:e4:3c:bd:73:80:
16:e2:65:34:ec:0d:15:af:d3:fa:ce:6a:6c:8a:15:
75:8d:86:b7:91:6a:50:70:79:20:5e:03:ac:3a:42:
bd:ba:cf:3e:da:fd:a8:b6:3e:71:01:2f:43:92:f0:
63:2e:3d:12:cd:ca:2f:42:8b:b7:7f:98:82:96:d9:
68:b9:90:79:8e:40:c7:bf:87:4f:96:b2:e6:10:c2:
20:a6:db:1b:6e:f1:65:a5:e8:99:24:6b:5c:ce:ec:
a4:9d:68:76:33:38:d9:df:dd:1b:c2:b9:5e:d9:01:
f1:54:67:81:3d:b2:d0:90:de:0d:a7:bb:a9:91:f1:
4c:6f:42:5b:1b:b9:79:b3:d2:23:6b:21:eb:05:8d:
8f:66:4f:02:5f:f3:f3:07:3c:b1:0e:f8:93:39:c7:
4e:59:bb:19:b2:15:20:a4:5f:c2:74:09:5f:57:7f:
6f:f2:5d:a1:89:d4:dd:ba:11:ab:22:51:db:10:17:
13:9d:7f:fb:98:c4:c8:36:a3:0f:ba:11:16:4d:b5:
6c:63:41:1a:57:1a:cf:ca:b6:13:1e:1d:dd:d8:38:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5C:90:9A:63:57:91:1D:DE:A6:74:FC:43:0B:87:F0:D7:94:E8:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b20adb6b-d1b2-3d99-9d07-b25aa8ae5d68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.143.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:ff:94:d3:f4:46:bf:32:92:bc:e4:99:3d:ae:d0:f6:ea:45:
5c:b6:d2:3d:f0:ed:46:59:11:e1:ed:d5:19:10:73:13:eb:08:
37:0d:36:30:c2:3b:12:ef:98:3a:9b:b5:44:a4:6c:d1:c8:bf:
b1:04:7b:d3:a4:d8:b7:6d:43:2a:2d:c5:43:f7:1f:e6:ed:d5:
08:c9:f8:28:58:ca:50:5f:9f:89:4c:15:20:ea:55:9b:c0:ad:
c4:a9:9c:36:7d:a2:5b:e2:c3:c1:57:2f:7d:09:ef:ff:d8:15:
ee:b2:99:8a:29:32:d9:cb:f3:0c:e5:21:3f:25:94:11:83:95:
c8:09:11:18:ba:12:fc:ec:66:55:f0:2c:b5:bf:fb:ec:53:ca:
bd:36:5d:5d:6f:ab:30:65:cb:28:25:9a:4e:3c:f8:e4:06:c8:
55:e2:47:b3:14:77:86:64:34:fa:24:3c:04:c9:86:84:a6:e8:
b3:c9:3b:e2:49:47:7d:41:12:24:68:9f:8f:63:41:06:4d:70:
4f:15:bd:6b:2f:e6:cb:69:99:18:c0:df:59:ce:66:e8:63:d3:
92:c7:85:4c:c5:cf:a0:1d:8e:ae:25:fe:75:b9:e9:83:7b:d5:
cc:5f:b2:9a:ff:d0:ae:7a:84:ed:fc:f1:a4:d5:63:be:cd:31:
5c:75:6b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:11 2025 by rpki-client