Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0a663b1-ef24-3fcb-8791-3e3a0a8f0e4c.roa
File: d0a663b1-ef24-3fcb-8791-3e3a0a8f0e4c.roa (raw, json)
Hash identifier: ozdVAs3MYBgmKUNDoKsPxOwhCLxYiyi6rsKbaJ0zff4=
Subject key identifier: E9:F7:97:76:20:16:B3:CC:DE:C9:FF:53:62:B8:90:4E:02:73:46:79
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B2EC295BE65AE320553C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0a663b1-ef24-3fcb-8791-3e3a0a8f0e4c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 76.118.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:2e:c2:95:be:65:ae:32:05:53:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=5176f582-b2a2-4eb0-95fe-7e93e1bb1a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:a0:45:9a:43:9f:ba:e5:66:96:92:2d:f3:
42:3c:d2:99:b5:98:b6:56:ae:e7:a6:a1:78:5f:e7:
5e:7c:12:8c:10:0b:fa:17:75:5f:2f:c2:82:8a:5a:
7a:0b:41:c3:25:86:4f:65:03:d8:2e:1f:af:44:dd:
c8:b7:54:bd:05:20:d6:2e:5e:c4:9a:8e:5a:51:b6:
24:b4:c7:9c:67:83:e2:77:7d:b2:26:67:39:79:52:
71:9f:a5:07:98:cb:7d:86:36:f0:82:13:b9:99:8a:
19:56:3f:6c:c5:be:46:16:09:5f:b9:2a:14:e1:60:
ec:a4:f5:8b:e9:7b:15:40:3b:73:3d:97:ad:a0:54:
3f:90:48:0f:a8:63:3b:83:0e:90:5e:2d:3c:45:8b:
07:d0:fe:4e:69:90:24:bf:21:7c:07:c7:c5:37:df:
b9:ec:38:2d:fa:e9:67:b2:53:b9:e6:a5:8c:c3:17:
04:51:88:da:7d:fa:57:74:b7:d3:d8:49:d6:af:3c:
be:c8:ef:35:c8:b9:fa:ea:ab:ce:0d:86:7b:21:6e:
b4:53:06:46:9b:9c:bb:bf:45:a7:1e:33:ae:b4:d9:
58:31:db:25:77:7f:40:bb:75:b8:00:ab:79:e5:34:
29:b3:3f:69:8e:b3:fc:ae:a1:ff:3a:28:f9:5a:e9:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F7:97:76:20:16:B3:CC:DE:C9:FF:53:62:B8:90:4E:02:73:46:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0a663b1-ef24-3fcb-8791-3e3a0a8f0e4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.118.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:89:d4:a8:27:96:58:56:58:c9:23:15:10:5b:cd:5b:1d:c7:
1a:f8:f0:c5:f3:8f:fb:ab:07:e2:9b:46:5d:ba:bf:33:f5:59:
35:65:92:6e:37:fc:62:20:d1:fe:f8:f2:21:42:b9:45:0f:71:
49:30:98:07:f8:79:c7:b2:2a:45:a8:10:f3:81:48:75:f0:b4:
f1:b1:82:66:ab:26:ab:9e:9e:12:8f:41:f7:7f:d6:c0:08:bd:
6d:4f:40:11:29:11:ae:47:17:38:89:ce:24:6f:06:85:13:21:
57:35:d9:16:96:3d:65:73:a3:97:fc:cb:1f:2e:76:28:bd:e6:
55:1f:e8:36:f0:cb:b2:00:e7:11:0b:56:68:27:32:48:8d:d7:
08:b7:a9:65:fa:ac:59:bf:34:31:a8:5a:8f:19:1f:c9:83:d1:
7e:b5:cb:93:9d:a8:50:dc:ad:36:a4:10:fb:c5:4d:bf:2f:d1:
64:58:dc:22:44:41:53:b1:08:87:5e:2a:33:56:cb:17:0b:77:
38:bc:57:e9:fc:3a:ca:bb:0b:3c:37:e9:0e:59:38:c5:8b:26:
85:8a:ce:82:fd:9a:b5:ef:e3:a0:a5:22:44:8a:0a:56:d2:dc:
5d:b7:5a:49:59:ff:74:12:1c:b0:9e:d0:2f:3e:89:9d:4d:75:
b1:ab:df:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:45 2025 by rpki-client