Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2720b21-80b8-3382-9ac5-acca90d5667c.roa
File: d2720b21-80b8-3382-9ac5-acca90d5667c.roa (raw, json)
Hash identifier: HJWg4BiObT/V/auNd2bYHigQ3x0i4DT2pp1OrmWfm24=
Subject key identifier: 31:89:23:87:92:21:02:D9:2C:91:E1:CF:49:33:96:BB:66:64:9A:63
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B2FD3CC6528E7F675A380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2720b21-80b8-3382-9ac5-acca90d5667c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 76.119.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:2f:d3:cc:65:28:e7:f6:75:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=dfa9f924-89ff-4a77-89a8-0a8a2a0b8b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:ab:39:42:11:8b:66:70:c0:d6:67:b9:d7:
f7:94:7c:67:90:75:ae:d4:ed:1d:7b:7b:02:85:83:
73:92:a7:8c:3f:70:2b:77:6c:76:92:9d:ad:18:43:
80:2f:19:a8:9b:4b:4b:ea:8f:79:48:c0:1f:19:7f:
87:bc:3b:14:ad:1a:c4:e1:a0:08:62:ee:4c:a1:5b:
98:93:36:4e:44:97:b1:e4:07:d0:b4:c3:29:c4:0e:
fd:bb:60:80:15:76:dc:96:90:d5:32:9b:89:7d:eb:
2b:a0:3e:05:c8:c8:03:8f:7c:5b:36:2c:f7:d5:05:
51:b6:fc:6e:40:74:31:89:86:73:a1:47:0e:be:58:
b4:b3:a3:9f:92:39:ba:01:ad:1c:ac:df:04:18:8a:
a9:44:e7:6f:73:79:e5:df:77:e3:40:4a:6e:91:fc:
06:99:2f:12:fc:f0:84:d1:77:25:8e:a4:16:76:8d:
c2:b2:44:88:c2:09:2a:fe:ae:86:74:7b:f9:34:98:
31:ee:c4:52:9d:76:e8:f4:d9:fe:ce:b9:e1:7d:d1:
cc:39:1d:19:0a:76:27:93:9b:a2:d8:45:9d:14:d7:
44:b5:18:bd:45:9f:b8:cc:fd:2d:c6:56:fb:26:ec:
67:d4:72:c7:df:4c:f3:13:20:a7:42:17:df:b7:0f:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:89:23:87:92:21:02:D9:2C:91:E1:CF:49:33:96:BB:66:64:9A:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2720b21-80b8-3382-9ac5-acca90d5667c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.119.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:fa:b8:a7:5b:10:f1:aa:f1:78:4a:ef:67:ff:59:52:84:13:
0f:9b:ca:92:02:73:ba:d2:b5:54:0c:a5:ac:c0:d6:a1:f7:50:
c2:87:82:66:48:ea:e4:62:41:db:e9:0c:c4:74:5d:34:17:bf:
70:80:bd:de:29:bd:85:9e:c5:c9:9a:65:c4:7b:8d:1c:f1:77:
87:f8:94:c5:74:c5:79:da:27:18:92:15:99:ae:e7:fa:39:ce:
dc:33:ea:5d:da:c2:78:45:b5:36:b0:3b:ad:23:13:09:9c:50:
03:10:b3:b4:85:f5:27:09:96:64:6f:27:60:67:86:cc:eb:95:
a3:18:76:52:18:2c:ee:f7:71:32:24:70:85:6c:3b:fd:e6:e6:
61:19:ac:f6:82:59:70:6b:94:04:42:24:ed:e3:15:04:a4:64:
ac:57:31:8d:d0:d7:cf:4b:ff:9f:1a:18:f9:ee:6a:7a:38:b7:
0d:2d:f2:e2:a0:59:d7:4f:19:3a:eb:75:43:57:90:ba:0d:7e:
ca:c9:2a:55:5b:15:13:1d:08:6d:c7:39:f6:cf:06:8f:13:f4:
68:1c:fe:b7:f7:96:64:d5:94:5f:fc:65:b4:fa:e0:de:7f:01:
dc:22:f6:62:4b:9a:c8:ea:c9:43:95:60:61:31:50:5c:d9:84:
93:d7:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:09 2025 by rpki-client