Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8dc7c2f-ee5a-3359-b414-32f2e16313a6.roa
File: f8dc7c2f-ee5a-3359-b414-32f2e16313a6.roa (raw, json)
Hash identifier: E5DDluzN8k7WhIzbmoAQ+Va1CRXICo5mIr7xaHILfiY=
Subject key identifier: C6:44:69:00:B0:BE:89:97:87:69:BF:CF:41:10:01:6F:A7:D2:62:B4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11441655FAD00D2A0DF080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8dc7c2f-ee5a-3359-b414-32f2e16313a6.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 76.16.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:44:16:55:fa:d0:0d:2a:0d:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4b89cd8e-ae0b-4386-b833-06bf9c084394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:2e:97:70:81:7b:53:69:97:ca:0d:7e:ae:
04:a2:23:ec:db:2a:9b:dd:7e:9c:67:e3:9f:23:ee:
64:83:06:5e:29:06:0b:3e:6a:cd:d8:4b:c7:e8:f5:
2e:71:5f:35:ad:77:43:95:c2:76:ba:dc:3b:79:07:
2b:1b:bc:9f:15:a8:7f:62:11:5b:59:60:07:65:11:
5f:9a:67:39:75:48:25:3d:26:3f:8f:77:7e:8d:d6:
57:75:38:f0:b0:bf:f6:03:fc:bb:d3:26:a9:57:a8:
4d:59:8f:72:8f:84:49:58:54:50:f4:d2:11:c9:95:
05:6a:58:2d:26:6e:00:8f:b9:e7:86:5e:6e:fb:fb:
8f:d9:aa:68:82:88:11:93:de:81:5c:d6:b8:41:65:
ed:51:49:b4:0b:43:f3:83:b8:49:ed:c8:b2:f8:b6:
25:94:ec:60:a5:f8:88:fe:fe:9e:66:91:4a:98:19:
4d:f9:cf:1c:8c:2a:77:4e:f1:f7:12:35:31:be:a3:
ad:ee:db:32:6e:0d:78:83:7d:43:ce:28:3a:eb:7c:
d4:bc:fb:63:92:0f:c9:38:a6:cf:a0:00:cb:26:06:
6d:05:e0:14:f1:69:bf:7e:8e:43:9c:28:24:bd:0f:
57:4e:33:70:f3:81:16:85:4e:2d:56:de:84:fe:e0:
7e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:44:69:00:B0:BE:89:97:87:69:BF:CF:41:10:01:6F:A7:D2:62:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8dc7c2f-ee5a-3359-b414-32f2e16313a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.16.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:94:63:dc:31:84:ad:be:a2:d4:a0:89:2c:d4:75:92:98:40:
ca:79:54:a1:c6:66:07:5d:77:59:ed:94:9c:dd:3e:c7:31:8b:
cd:d3:0f:2f:d3:11:69:e8:cc:be:ae:ed:c7:67:6d:e9:88:da:
61:10:7b:e8:99:53:09:06:69:34:05:da:b6:8b:b5:8e:61:66:
fd:65:38:24:6b:43:41:25:0a:94:3c:95:73:f4:b6:69:35:a0:
26:83:3c:68:d2:51:8c:e8:1f:33:33:f6:3a:37:ac:83:ab:fe:
bd:0c:ca:f6:ae:b6:91:84:67:94:d8:de:46:42:30:60:c1:1b:
30:8a:c0:e6:2c:4a:a8:75:7e:e6:99:bf:1c:51:c3:48:54:07:
c4:7b:af:60:f2:31:13:f5:5a:70:27:4f:35:d2:92:ed:3d:81:
e8:3f:ff:61:29:93:57:13:fc:36:8a:64:86:de:8a:07:6a:5c:
b8:21:e1:af:60:27:d7:2b:40:61:7a:36:cf:bc:93:c0:10:bd:
90:30:ce:ab:e6:4d:c6:7b:12:a4:d7:66:a2:28:bc:f1:13:8d:
56:9a:ba:d1:7b:92:d1:90:d1:1c:d7:ff:e7:9d:00:af:25:c3:
8e:9c:96:b0:d4:4d:28:92:2c:ed:81:ca:39:28:bb:43:a9:b3:
0a:45:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:35 2025 by rpki-client