Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf6d0407-6f7d-3fa3-8341-f99754afb164.roa
File: cf6d0407-6f7d-3fa3-8341-f99754afb164.roa (raw, json)
Hash identifier: gd2o6HxXOfTNOU+MKSfxmKmN4SwKrKm+eMzVqSuwZWI=
Subject key identifier: 33:F6:3B:D6:85:2E:B0:C6:1B:73:35:29:9F:9D:71:8D:2F:A9:AC:AF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12F2FBC9E022369E7C4680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf6d0407-6f7d-3fa3-8341-f99754afb164.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 76.136.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:f2:fb:c9:e0:22:36:9e:7c:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=60924076-2b2f-4b7b-8be2-5fbc664ec588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:77:26:cd:a8:da:78:97:6d:e5:48:d4:48:
1b:55:53:b4:b5:7e:71:e1:50:0b:5a:6c:7c:fc:0a:
5c:2f:61:28:47:dc:ab:38:0c:88:93:fb:d9:75:e7:
f0:79:12:20:7e:97:22:e0:00:66:5f:f4:9a:ae:4a:
dd:f4:3a:65:4d:b4:a6:2b:0d:a8:b1:e4:32:23:51:
39:8e:1d:a8:7a:95:53:f3:f8:cf:77:30:84:bc:ed:
98:c6:62:51:44:07:d8:28:f4:ca:b4:af:20:db:5c:
68:9b:80:ff:bc:6b:ea:b3:eb:f3:d9:01:10:1f:5c:
60:b6:38:1f:48:64:3a:76:32:91:2b:79:5a:f0:1b:
45:0b:68:50:63:bc:f0:42:af:48:ae:b1:c1:95:40:
fa:b5:24:cc:c7:b9:5d:08:df:39:2a:36:f9:6f:9e:
ad:8c:94:a7:9e:b2:3e:28:37:44:c6:7c:85:bb:c1:
2d:99:85:8e:72:b2:4f:95:23:e9:c0:48:d4:32:9d:
d5:09:b8:7e:98:b9:8d:eb:02:25:6d:29:3a:89:d5:
68:3a:47:d4:48:8f:d6:14:aa:a6:07:b6:07:6c:92:
b3:aa:9a:39:9e:2b:c1:44:31:92:3f:ec:28:94:b4:
f7:c0:f3:30:55:96:b6:35:f9:65:18:66:f4:7f:02:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F6:3B:D6:85:2E:B0:C6:1B:73:35:29:9F:9D:71:8D:2F:A9:AC:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf6d0407-6f7d-3fa3-8341-f99754afb164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.136.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:0f:11:de:b8:02:03:5e:7b:d4:fc:24:4f:28:23:34:05:18:
7c:2f:98:08:3b:39:fa:de:ba:06:94:6e:cb:39:98:b7:40:4f:
c8:ce:fe:b2:01:b2:6e:82:12:2c:70:b1:ba:c8:0e:94:fc:e4:
61:3f:23:2e:3a:4b:2e:ac:d6:d2:70:ed:02:00:16:7f:d0:9e:
f8:6c:14:70:36:ba:45:82:b2:b7:d6:32:e9:5a:c1:3f:d0:bc:
14:67:3a:16:93:e5:be:f2:89:d0:a8:d5:d9:02:ac:e0:62:e8:
bd:b5:bb:33:84:ca:35:66:f8:96:18:a4:44:e1:90:cb:06:79:
61:10:04:0d:be:07:37:59:89:6e:b7:ce:a9:03:ab:58:66:2f:
f1:b0:85:81:fd:cf:2a:9c:37:47:08:25:7a:34:5a:25:d4:3c:
5f:1f:7d:0c:3e:e8:35:72:ef:31:b2:07:34:ee:ae:85:c8:39:
d4:f1:ad:ac:0a:b3:22:28:0d:38:2b:b7:88:b3:8f:22:68:06:
7f:cd:5d:e2:58:7f:5f:24:7b:21:65:ca:42:fa:c8:cf:6a:54:
f6:fe:e7:6b:bf:a7:b7:b7:10:fb:73:2d:71:e8:34:d4:8b:e9:
e5:9d:a1:d6:fe:a5:50:71:fd:9a:7a:cc:4e:b7:0b:ae:6a:04:
f5:a8:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:42:38 2025 by rpki-client