Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4c21763-279b-3b90-b3de-f54abacbc60a.roa
File: f4c21763-279b-3b90-b3de-f54abacbc60a.roa (raw, json)
Hash identifier: Uc86ZlHc5u1HjQEIT57mDObGo4tPPpJcU1rnlMlHoRQ=
Subject key identifier: A9:A1:24:9B:0D:28:E3:23:48:58:D5:46:A1:DA:DE:ED:75:17:96:9B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143EDD0772A428EF851F2410
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4c21763-279b-3b90-b3de-f54abacbc60a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 76.28.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3e:dd:07:72:a4:28:ef:85:1f:24:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=95659805-afe2-43ed-9038-5cc1e8725b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:fe:3d:70:a6:0e:4f:b5:fa:42:70:2d:80:
a5:e3:bf:93:12:85:ef:47:f3:c7:f3:9d:0a:5e:c8:
42:44:de:5e:e8:d3:8b:dc:7c:96:c5:8f:56:d6:48:
b6:13:c4:05:ba:e4:79:e7:9c:90:0b:48:c8:6b:a4:
03:f1:9a:25:a6:d1:88:e6:a0:93:75:b3:ce:01:31:
85:7f:92:19:37:bb:5f:f7:0a:aa:47:7d:34:27:85:
91:98:fd:be:d5:36:85:2c:ea:d3:69:f7:b7:d1:7c:
bc:ef:ea:0d:1c:1d:3b:91:ac:83:ee:3d:28:bc:3c:
27:7b:f9:3e:24:97:8a:5a:7f:62:f9:ec:34:88:8d:
66:2a:74:f4:04:8e:d9:fe:52:6f:91:18:0a:72:48:
d7:a8:b7:08:06:d2:65:e9:55:86:ea:aa:1f:c9:49:
79:3b:a0:2c:8a:ea:ca:a3:2c:4f:8b:56:af:ab:2d:
62:0c:6f:be:17:60:49:80:3b:b7:6f:da:e8:fb:d8:
01:42:ec:66:14:f7:b4:b3:85:b4:6b:45:d8:7c:ac:
84:cf:e2:dc:be:a9:11:c6:54:23:ae:90:49:73:43:
9d:92:31:7f:6a:52:fc:59:9a:df:e5:da:f8:f6:99:
af:64:a9:87:24:8a:55:7d:c7:f6:65:67:69:90:4f:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A1:24:9B:0D:28:E3:23:48:58:D5:46:A1:DA:DE:ED:75:17:96:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4c21763-279b-3b90-b3de-f54abacbc60a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.28.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:5a:37:d2:a9:7f:2c:4d:6c:99:f6:54:5f:a6:05:ba:b0:ac:
c1:8f:62:2d:f2:23:08:fe:b0:34:59:85:7d:fc:3a:5f:3c:03:
d3:5c:4f:dc:97:39:fe:ef:97:31:3c:c5:1c:14:1a:6b:97:38:
99:ca:50:4b:3e:c7:ce:b4:c6:cb:a4:87:f3:9e:21:56:e8:a5:
f7:20:18:e5:3a:cf:e1:50:b6:0c:66:3c:70:31:a9:5e:8f:29:
63:38:2b:0a:33:02:ea:ff:2d:b1:fe:b2:a0:ac:bf:c9:d0:3e:
fa:15:9a:10:50:37:2d:85:d3:f2:5c:43:3d:34:5a:48:21:06:
b2:db:83:06:99:be:18:8e:e7:82:e9:15:a8:38:90:0f:94:77:
62:0f:4d:24:89:48:08:23:6f:c7:60:82:3b:56:af:78:4d:e7:
0f:35:26:be:ac:6b:9f:87:86:16:c3:25:6f:e2:0a:48:19:34:
29:be:17:d0:38:e9:98:ab:6d:e0:f3:51:99:a2:53:e6:ea:1d:
e0:3a:a0:8f:3d:19:6f:99:0a:86:38:1d:e5:33:de:11:b1:10:
e1:fa:a7:cd:46:46:3e:9b:9f:42:fc:2b:44:36:4b:7e:e0:95:
05:8f:42:53:de:f3:e7:96:85:b6:c2:eb:27:11:1f:84:90:92:
0b:e3:9d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:03 2025 by rpki-client