Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e492174d-82a0-3b05-9961-aa161725d2f7.roa
File: e492174d-82a0-3b05-9961-aa161725d2f7.roa (raw, json)
Hash identifier: /zoGlRbfT1U993AKyw9/Y/8pZ9iqS3612Y59Eikdbl0=
Subject key identifier: 2E:E4:C1:3D:9B:69:D8:A4:CD:3B:A4:67:3E:CE:5B:8E:BE:B5:55:07
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C14EAD2F67F4372F7CA1700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e492174d-82a0-3b05-9961-aa161725d2f7.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 76.21.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:14:ea:d2:f6:7f:43:72:f7:ca:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=89b003e3-80d5-4b82-8837-653213b820a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:36:a7:92:f0:2a:04:20:2f:2b:30:81:3d:
9b:f4:7b:27:e4:0f:6a:13:37:4c:c1:21:40:dd:13:
df:72:dd:4c:bb:83:09:e9:c7:e7:99:47:68:96:cd:
5c:0b:0b:16:f5:3d:0c:ab:ef:f5:a0:d7:6f:a0:57:
fa:de:6a:e9:c0:a7:5a:c9:20:0e:0d:6f:60:c3:74:
59:4a:59:24:de:62:76:ab:c1:63:ba:0b:a7:e0:53:
e5:5c:08:08:32:a4:da:eb:7a:96:6e:71:83:62:b1:
a4:36:a4:33:cb:c0:b0:05:1b:dc:62:d5:c3:30:4c:
19:22:4e:1a:85:6d:c2:f0:0c:df:8f:53:7d:11:b1:
f9:c9:41:d1:a4:2d:33:eb:0f:d2:d9:9f:f2:21:a4:
e8:89:25:7a:9f:3a:0c:40:53:b3:d8:7e:a5:f7:7a:
51:24:2d:4b:bf:c3:7b:23:e4:9a:30:94:4c:c8:3f:
0b:a8:f9:23:d6:8e:11:42:db:21:3f:6f:d3:76:d3:
cd:0d:da:f9:d5:9e:06:f2:ab:10:31:3c:e0:68:53:
af:c5:62:83:9c:fa:16:73:cd:c6:3c:27:6f:ea:f4:
05:05:dc:d7:a6:3d:f3:62:70:dd:3d:fe:6a:f4:e8:
63:0c:f0:4b:92:86:ff:cc:aa:8e:8b:10:64:cd:c5:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E4:C1:3D:9B:69:D8:A4:CD:3B:A4:67:3E:CE:5B:8E:BE:B5:55:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e492174d-82a0-3b05-9961-aa161725d2f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.21.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:07:57:b5:16:12:f0:8e:d0:c5:59:5b:07:3f:ec:71:4c:52:
e6:46:05:5c:66:e3:b6:ec:c3:42:30:75:54:d5:58:d7:6c:0b:
5e:81:66:64:47:82:2b:35:c1:54:b8:0d:28:79:72:aa:4b:a6:
6f:d5:0b:d0:de:63:b1:9e:38:dd:45:05:4d:02:55:c9:ff:79:
ff:89:85:08:36:b6:54:a5:42:50:9a:65:1e:b3:21:e0:45:74:
fe:1c:8b:27:eb:f1:f5:92:a0:1c:5c:9a:83:06:f5:7c:ed:85:
de:9a:ae:79:cc:78:62:00:0d:5d:3c:0b:ca:5d:31:0f:df:e9:
8d:26:84:ee:f5:1d:86:84:17:d7:b2:59:30:7a:a4:e1:9f:ed:
50:2b:70:a6:d3:97:ca:81:26:2d:97:a8:29:4c:43:87:f6:24:
fc:e2:4c:25:c3:9a:ef:25:ac:b8:e5:ba:15:d5:07:4a:80:cf:
9d:f2:8c:09:12:f7:82:a6:c5:7b:50:2d:6f:1c:40:b3:11:31:
b5:60:5a:18:b7:f1:31:b7:38:f0:40:ee:f6:5e:aa:3d:60:e0:
91:11:da:31:6a:5e:ec:ee:c5:9e:c5:34:f9:b2:22:a0:d7:c0:
cb:f8:38:54:59:e4:bb:23:29:44:0e:bd:d8:c8:c4:bc:ff:02:
a3:72:74:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:50:33 2025 by rpki-client