Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d1f401-6cc2-3c13-9c1d-a41c3d61b3fe.roa
File: f4d1f401-6cc2-3c13-9c1d-a41c3d61b3fe.roa (raw, json)
Hash identifier: k3vd5bYGqEeJMgyomKz/Ii0vstb7YIqI4I/VsX16+Po=
Subject key identifier: EB:29:8E:15:63:BC:41:88:32:42:C6:B7:9C:8E:2E:F6:E4:1E:3A:61
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11BB022CFD46D286B62C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d1f401-6cc2-3c13-9c1d-a41c3d61b3fe.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 76.21.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:bb:02:2c:fd:46:d2:86:b6:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=bf2c5919-7d16-4624-9d2a-75856f0e6aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:63:c0:bc:ab:5f:ba:49:4b:9c:cb:e2:28:
a8:11:37:f3:52:cf:71:f4:54:29:6d:80:3e:2f:11:
4d:bc:fb:c3:b4:30:e8:09:8a:4e:05:4e:72:11:f1:
e3:1c:78:36:87:ee:c6:62:d2:65:53:2f:15:1f:79:
7d:32:82:2f:75:cb:1d:f9:4b:96:3f:69:2f:17:11:
39:be:2f:f0:d7:2b:8c:5a:46:63:bc:94:7b:1d:55:
e4:cc:ad:d2:db:5a:01:67:40:dc:28:34:46:ae:38:
eb:76:3a:64:54:2c:a4:bd:df:98:84:b7:ee:d8:2e:
10:9c:24:53:5c:3e:30:7c:88:c7:96:1f:99:89:6d:
11:4b:45:fc:48:c8:a7:d2:96:26:4c:21:0c:be:ad:
fd:d8:13:d8:bb:03:43:b2:4c:93:7a:59:c2:74:c5:
ab:77:fd:6a:51:43:0b:68:1a:44:35:0d:bf:0c:fc:
dd:cd:5c:9b:d5:b3:0f:98:ad:d5:0a:04:00:b7:7a:
7d:85:29:45:51:35:79:fd:6d:22:5d:ab:13:20:12:
5f:c3:46:1f:ea:00:31:7b:e0:0b:49:23:7b:17:d7:
ac:42:4d:1c:27:81:d8:3e:b4:65:1f:b1:39:25:93:
53:99:e8:19:c0:be:7d:dc:eb:f0:29:b4:a0:f7:14:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:29:8E:15:63:BC:41:88:32:42:C6:B7:9C:8E:2E:F6:E4:1E:3A:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d1f401-6cc2-3c13-9c1d-a41c3d61b3fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.21.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:cb:ba:37:cb:7c:52:1e:10:e2:0c:18:32:c7:fb:56:bd:22:
71:3e:9a:e5:2c:5f:98:0c:51:a7:a4:6c:ea:ec:ca:a7:c4:1e:
d4:62:33:c8:23:8b:eb:d0:5f:e5:f7:5a:9d:ce:ee:bf:25:96:
b0:08:b3:53:0a:9d:84:18:d2:50:e5:a0:ab:1e:c6:00:4e:b8:
03:43:c8:ec:ac:a7:c7:ad:a2:2d:d8:0b:27:57:f1:7d:d8:29:
f9:2f:1b:ff:be:a0:f7:42:1b:67:80:11:c5:14:5f:a4:d5:ea:
6e:ad:5d:a7:8c:bf:8d:e5:f0:81:ad:3b:9d:f0:84:f5:3d:63:
1c:5e:bc:15:78:8d:cb:91:6d:19:85:90:e4:c8:d9:56:0e:c3:
cf:dd:99:ce:2d:cd:3f:5c:5f:90:53:77:c9:72:03:95:6b:d6:
44:96:54:4b:f0:7c:42:eb:2e:73:8e:a7:04:3e:c8:5c:a5:01:
ab:7d:1e:dc:95:1a:f2:dd:ef:bd:7c:aa:09:bb:17:64:f9:ae:
83:52:db:78:db:9d:01:99:ab:08:4b:29:e0:53:0f:43:bb:78:
58:fd:70:bd:4d:18:3d:00:3d:7b:74:80:73:2a:20:c5:78:47:
29:24:d1:53:f2:61:b0:f9:da:7b:2d:34:09:67:a8:66:1e:04:
78:e1:f8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:51 2025 by rpki-client