Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb2aa9b3-cf0e-3c07-a2b7-189672e8c046.roa
File: bb2aa9b3-cf0e-3c07-a2b7-189672e8c046.roa (raw, json)
Hash identifier: Pg3Mvd2iQ4dBV9y5+oXYsVwWAbGf7G2dpxCLatcgB0c=
Subject key identifier: 34:A9:13:0E:74:FD:BE:C6:4D:D3:77:A5:57:40:2C:23:05:27:C0:55
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C113B2F5887509996A61E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb2aa9b3-cf0e-3c07-a2b7-189672e8c046.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 76.141.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:3b:2f:58:87:50:99:96:a6:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=45b160c4-ed40-4b37-9a27-299f9330975e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b9:12:af:bf:87:37:a7:02:98:3b:26:d0:71:
0d:df:38:8d:9b:32:55:5b:95:f3:7d:51:24:31:98:
f6:0c:5b:92:c4:48:1e:e3:a4:ac:a7:02:12:50:31:
8b:55:6b:fa:3b:90:15:67:0d:43:4c:eb:0f:32:e0:
42:59:d7:be:75:96:59:53:c8:d2:94:7c:da:a3:8e:
d7:9a:f6:cd:1f:61:ce:70:41:c5:f3:0d:55:d1:9b:
19:ea:af:86:da:a9:d7:a9:c1:6d:7d:c2:66:e1:23:
e5:30:0d:66:13:67:19:c0:41:1b:13:4d:f7:5e:b5:
2f:cc:d7:23:82:93:32:ff:9e:86:81:c2:8f:b3:d1:
61:ac:3f:70:0b:03:86:f9:23:3b:72:48:1e:a5:d6:
bd:47:da:31:7a:8c:5c:18:d3:0a:99:db:77:cb:89:
13:88:c7:ee:21:40:5c:58:4b:46:c8:ff:a4:28:e0:
24:af:06:f0:ca:82:f5:34:e8:48:7a:e3:03:bb:f8:
16:2a:08:1f:04:99:46:59:69:a2:bb:3b:ad:81:0c:
ed:c7:28:ad:b9:82:f6:d7:b9:0d:32:67:31:5e:63:
52:9a:59:d7:a5:92:42:a4:1f:a5:c5:7b:59:8b:10:
5c:84:dd:8e:00:c9:61:62:49:d0:5e:63:21:a2:8a:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A9:13:0E:74:FD:BE:C6:4D:D3:77:A5:57:40:2C:23:05:27:C0:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb2aa9b3-cf0e-3c07-a2b7-189672e8c046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.141.80.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:7f:97:d5:af:cd:65:fd:81:65:0a:d1:2f:c6:8c:1a:06:20:
42:33:ad:97:0f:1c:5b:49:18:46:12:8f:1c:e6:82:0c:eb:04:
c0:40:a7:24:0f:2d:a4:8d:a4:ab:4e:be:7c:95:db:0d:bd:f4:
8c:f3:9b:7d:c3:3d:08:df:29:fc:7f:22:f3:ea:6f:1b:dd:27:
7d:ba:63:f5:a1:67:e5:0f:f7:c6:e2:37:44:af:bb:86:95:7f:
32:75:0d:f4:9a:7f:0c:d4:2d:25:1c:a8:24:12:43:c3:08:ff:
da:4e:46:0a:19:1d:76:98:6b:62:e8:42:f9:50:3c:f2:e1:bc:
3f:d0:0a:45:af:df:98:d3:6d:2a:14:7a:9c:bc:6c:ed:7a:56:
a8:3f:75:91:e3:96:cb:17:fb:61:ca:a6:d6:fe:75:84:f4:2e:
e1:7e:b9:34:b5:51:a5:86:be:04:cf:01:c3:a0:d3:56:d8:4b:
ea:43:b1:0f:5d:27:e9:a2:da:8c:40:d2:be:50:27:32:b7:86:
dc:37:7a:45:95:a9:ab:9a:e1:22:ae:04:29:08:e7:5a:49:24:
62:22:df:7e:9a:96:cd:6e:d5:a7:17:34:ab:1f:ba:ef:e0:2f:
06:7c:e7:52:ed:c3:e9:2d:6b:4e:8a:ad:17:0d:d6:3e:81:e3:
be:ff:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:00 2025 by rpki-client