Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2cbbfd3-42cc-3011-a740-3d1fdd75f0fe.roa
File: e2cbbfd3-42cc-3011-a740-3d1fdd75f0fe.roa (raw, json)
Hash identifier: UTX84ry6wX9mAqfdi9pCPazG8xPJy06NK/JtV9Smhe4=
Subject key identifier: 83:B0:60:88:16:C0:33:DA:CF:32:33:59:AF:DD:3A:A1:CC:E3:10:40
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C113F39A580C734AFF1A460
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2cbbfd3-42cc-3011-a740-3d1fdd75f0fe.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 76.157.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:3f:39:a5:80:c7:34:af:f1:a4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=42e28551-b8fe-47b2-818e-aedaffb00c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:44:f8:d7:7e:04:9d:ac:f6:22:71:da:e2:4f:
98:54:4e:be:dd:dc:05:45:97:04:fa:71:90:b1:3b:
61:5c:7d:33:26:e0:d7:e1:04:eb:b8:aa:78:58:2c:
35:31:9e:e4:97:eb:87:d4:0a:65:41:2f:f3:20:5e:
de:38:7a:23:0f:5b:54:e3:66:c9:5f:5c:30:40:45:
42:b7:bc:54:2d:a5:ff:9a:a2:20:93:ee:8a:20:aa:
ec:73:b8:0f:ff:df:83:0e:79:31:44:f0:48:4c:87:
da:e0:c3:60:b4:19:e2:13:11:b9:77:a0:45:34:14:
3f:bb:24:84:0f:97:01:ec:65:45:e4:98:1a:22:e6:
51:9d:20:ab:b4:1d:5b:e5:04:68:ec:a8:06:67:0d:
e0:ba:0b:59:e0:5f:7a:ab:3f:ea:9d:7c:be:00:2f:
b4:50:8d:02:b9:fa:8b:58:80:5b:5f:72:51:7e:a5:
e4:52:f6:88:ff:0b:cc:71:5d:8f:b3:78:c3:cf:61:
14:83:f9:9b:6a:83:89:6d:00:23:fd:a8:9e:b2:a6:
e4:aa:df:3b:15:75:9a:72:0e:2a:be:c1:2f:5e:4d:
c0:d3:1e:3f:57:4f:b4:3e:21:cd:4b:06:c1:49:21:
77:88:9a:14:e8:07:2c:75:df:ab:f7:94:7c:10:6a:
3b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B0:60:88:16:C0:33:DA:CF:32:33:59:AF:DD:3A:A1:CC:E3:10:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2cbbfd3-42cc-3011-a740-3d1fdd75f0fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.157.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:ef:9e:11:e2:ce:44:48:80:5f:9d:a5:61:61:c3:b5:01:c4:
38:69:0b:89:e1:b7:74:bd:0f:91:8e:30:51:b9:6e:63:8b:fa:
43:18:1a:ed:89:7f:99:96:15:ef:60:73:b3:c3:56:b6:c8:7b:
09:13:46:83:56:ea:e6:e8:fe:d8:fb:bd:24:df:51:9f:75:6a:
60:4b:d6:f9:5b:2a:87:8b:e1:2f:52:1b:f1:0c:07:6d:41:73:
f4:33:af:29:53:a6:ff:82:e7:37:e4:d8:a3:33:84:be:a3:51:
96:e3:fb:50:a5:5d:19:67:20:69:65:0c:49:8f:5b:17:d1:8f:
40:94:0b:43:b0:f6:a1:86:3a:7b:e9:ed:b4:0e:55:68:e2:7a:
af:96:c7:11:63:4c:de:95:ff:d1:d2:2a:e5:ca:79:c0:23:a6:
83:2d:8d:2f:bb:42:a9:de:63:eb:06:53:a4:d8:30:98:8f:fd:
be:03:50:e3:a4:aa:9a:90:1b:ed:1a:39:17:d5:89:80:2d:0d:
40:ea:61:41:07:fb:ba:36:90:b4:71:a9:7b:bd:f3:85:5a:d4:
34:a6:01:ba:fe:cd:28:7c:6c:2d:13:81:09:a2:f2:c3:06:d5:
ac:70:ab:66:1b:da:1e:19:9a:22:74:de:3c:a5:a1:cd:07:74:
93:d1:40:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:38:02 2025 by rpki-client