Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa1d0787-58e9-31f3-85d5-a943ea2dd0de.roa
File: fa1d0787-58e9-31f3-85d5-a943ea2dd0de.roa (raw, json)
Hash identifier: on6BgUy22e7orAndN1IkZjtxKz32nVaa1oPwrSy7l6c=
Subject key identifier: 39:85:D2:63:4E:53:1D:FB:8F:E6:66:83:AC:52:B3:F8:E3:DF:98:D5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143ABC267428D8A6FE586480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa1d0787-58e9-31f3-85d5-a943ea2dd0de.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 76.27.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:bc:26:74:28:d8:a6:fe:58:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=a9505e42-76ca-49f1-a197-4936da63b06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:4a:12:8d:40:eb:07:3f:0f:cc:d3:f8:f3:
73:25:a3:72:2c:6e:57:f7:82:6d:c1:00:e8:64:75:
61:9b:20:1f:ea:0d:2e:a7:ac:14:58:ae:b4:23:bb:
90:9a:bf:b6:11:b4:7d:00:69:c0:6e:4c:f4:5d:42:
cf:4a:b2:8e:e6:c0:9a:d7:07:af:41:1d:90:6c:d9:
41:9c:95:09:a4:d1:20:c7:7d:0c:03:fe:11:6b:7f:
f4:a0:ce:aa:5b:ac:ba:e1:35:88:0c:4b:0a:e9:ef:
4e:ae:0d:be:e3:4a:d8:d7:dd:8f:5e:9e:47:ab:20:
e7:70:3a:6d:12:99:19:94:2e:07:41:ea:a9:50:cb:
a3:9c:ea:0b:05:5f:97:21:fe:d5:8a:a4:29:f3:58:
15:38:0c:02:1c:01:00:c9:61:2b:eb:0a:3f:c7:42:
95:91:55:10:d6:65:63:d7:35:8e:9b:f5:04:63:07:
eb:ac:e1:a4:22:22:37:72:2f:d8:1a:23:31:37:a8:
0d:41:c7:09:d2:3f:a0:ca:c3:a0:6b:ba:b1:2d:c9:
d0:b8:09:ab:1d:63:23:ad:dc:a7:f0:f0:99:03:df:
34:e9:4f:0a:e0:1c:e4:d7:b9:0d:35:08:f0:3c:a4:
c0:59:53:8f:6b:b5:36:ad:1f:15:c1:d0:58:a4:61:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:85:D2:63:4E:53:1D:FB:8F:E6:66:83:AC:52:B3:F8:E3:DF:98:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa1d0787-58e9-31f3-85d5-a943ea2dd0de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.27.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:f7:e9:11:57:28:16:27:7b:14:17:fc:14:de:9f:37:aa:b3:
a3:dd:64:3d:d1:b9:8c:a6:5f:f9:6b:9f:4e:4d:6a:39:b5:0d:
72:02:e1:a1:c3:0f:84:90:2a:d2:28:4a:c8:b2:59:17:44:1c:
af:b3:2b:5f:d7:65:87:e2:68:99:3c:de:e0:a1:a3:be:ac:59:
57:8e:92:a6:d6:0e:2c:44:a4:2e:7c:4a:da:5d:a1:b1:6f:06:
ab:e4:6d:1e:6d:4c:9e:c4:1d:65:71:6a:c9:d8:a2:a7:9b:07:
45:c3:55:9e:3e:56:da:60:42:3b:45:79:e1:fb:2d:4a:b6:63:
d5:be:1a:91:dc:37:85:37:ef:ce:88:22:66:60:a5:13:8c:ac:
4f:d0:8c:63:3c:59:e9:47:67:f9:17:ff:e1:14:b8:0b:00:b5:
68:c2:70:2a:a7:90:9d:89:f8:88:8e:b5:38:3d:da:f1:e5:e1:
54:5f:6b:e5:e8:9e:b9:6c:91:e9:8f:40:80:88:fe:de:43:01:
d4:d7:cc:d2:37:b9:7c:81:89:68:20:6e:3e:72:8d:b7:eb:bc:
72:b5:6c:e0:dc:a6:8b:31:a4:00:d7:f7:a1:cf:ca:7a:a5:54:
41:e9:df:99:59:c4:c1:6a:28:07:2c:18:f0:bf:a0:7b:49:d9:
8b:df:7e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:43:42 2025 by rpki-client