Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d1884b-b944-36e9-b004-1dad2b53ff5f.roa
File: d3d1884b-b944-36e9-b004-1dad2b53ff5f.roa (raw, json)
Hash identifier: N5/yRypvuPa8M93NVFo6WFUeROl+tjuelOk1bvohMMQ=
Subject key identifier: AF:F9:97:26:C6:BC:6B:B5:9A:09:F5:E5:D6:57:02:26:63:42:97:4F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C14DFB23969D60D5BA73900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d1884b-b944-36e9-b004-1dad2b53ff5f.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 76.133.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:df:b2:39:69:d6:0d:5b:a7:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=af50b5d3-612d-4441-a0d3-93b9c49a6861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:96:3e:49:48:5b:45:18:85:0a:6f:ce:cb:
86:e1:fe:20:7d:49:67:cd:0c:d0:79:24:fd:ff:17:
d4:04:a7:9e:16:b2:a3:df:90:71:93:3f:b2:82:1c:
19:2b:94:74:71:51:21:5c:5a:fa:cd:b8:b4:89:eb:
2b:27:b9:f3:06:d7:8f:87:2e:8a:05:43:41:8e:4d:
15:f5:89:16:d8:4c:c6:30:11:28:28:19:d8:77:de:
80:43:a5:58:23:4a:d1:0c:f5:8d:9a:42:84:58:39:
4f:a1:3e:1a:16:ae:31:90:34:aa:c1:3f:df:30:12:
0b:e6:e1:d2:e2:5a:54:3d:e3:4b:e6:9d:32:a5:3e:
dd:cd:4d:69:91:96:09:8c:7e:89:55:dd:cc:a6:15:
7e:86:13:cd:cb:5e:45:db:f2:63:d3:81:4f:83:58:
69:c7:5e:fb:33:02:5d:93:86:bf:33:8b:c1:e3:e5:
89:fa:52:30:77:f5:39:3e:c8:70:dc:98:7d:07:ca:
77:df:be:0d:e9:46:1a:d7:e1:a4:05:51:be:b7:e3:
be:03:0b:1c:72:da:8d:83:dc:f7:bc:dd:35:dd:46:
0e:a2:d0:bc:cb:1e:67:c5:67:0b:b3:a5:af:42:4d:
68:e4:bd:52:96:95:ef:bf:de:6e:0a:5c:60:4d:6c:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F9:97:26:C6:BC:6B:B5:9A:09:F5:E5:D6:57:02:26:63:42:97:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d1884b-b944-36e9-b004-1dad2b53ff5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.133.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:84:a9:fb:41:76:b4:6d:87:5d:0e:b8:ce:af:e9:4d:b1:8e:
da:02:b5:fa:1a:a9:57:8b:97:bf:32:52:14:73:ae:2b:11:b9:
f5:02:4c:ac:0f:e8:af:0a:08:c4:3d:2f:0b:00:a4:8d:d5:fd:
ec:7a:47:04:2a:fe:97:1e:66:a5:6d:ee:8c:df:58:3f:f0:db:
e6:48:4f:91:cf:c1:dc:78:dc:30:ee:85:04:43:e4:33:2b:60:
c1:36:80:ee:f5:c5:b2:e5:0b:a3:55:04:d0:5c:a0:f9:55:8e:
e5:69:19:c2:96:00:1b:df:cf:f8:a8:45:b8:74:34:bc:2a:04:
b0:50:d1:4b:05:64:22:e6:cc:41:f1:27:a6:c4:ec:27:3d:8b:
83:3f:5b:1d:f4:61:a4:21:6c:24:c5:ac:76:fa:41:7c:b2:e4:
99:3f:5b:20:ec:ae:e5:ff:c2:9c:0d:ec:5c:ee:3e:b3:20:21:
3c:06:85:16:5f:1c:d6:81:08:b9:d8:10:39:8d:71:59:18:4c:
49:d8:05:52:4f:77:b5:67:7a:fe:a4:90:54:f4:f4:fe:9a:cc:
5b:8b:64:89:f7:e6:bc:ce:1e:9f:e2:b9:60:f6:d6:8e:09:d9:
ba:38:7e:fe:64:15:67:95:19:f3:f5:49:91:ca:e1:9f:40:5a:
6c:b8:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:11:25 2025 by rpki-client