Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa844b0d-3e33-30e0-80c5-b9b22cd4cf33.roa
File: fa844b0d-3e33-30e0-80c5-b9b22cd4cf33.roa (raw, json)
Hash identifier: iu9nzcxUUOPr4sot8cJszt07NOIT1W7Z3W/Vd1oPML8=
Subject key identifier: A5:2D:A1:46:A3:FC:60:A4:B6:5B:06:68:B7:DA:88:8D:29:27:A3:B4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1259498D0421758B5E2180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa844b0d-3e33-30e0-80c5-b9b22cd4cf33.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 76.124.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:59:49:8d:04:21:75:8b:5e:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=314703ae-326d-4165-a619-dd7daf61c6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:05:81:2c:be:bd:ca:9f:6d:65:39:a6:ca:
e7:30:7c:b7:58:9d:14:91:2d:5f:59:68:0f:b8:44:
27:4a:c1:7c:f1:86:70:8e:34:4e:b3:d7:95:7e:de:
d5:2d:4d:34:60:63:bd:86:dd:5e:39:88:6a:26:a0:
3a:6e:61:de:c8:da:58:a5:48:f0:4b:b7:20:15:96:
94:c7:61:01:9f:4f:41:18:96:45:0e:76:df:be:ad:
1f:53:80:14:4a:46:ab:c2:dc:10:74:f5:af:72:35:
30:40:c4:e7:46:e0:38:92:64:78:66:b2:d1:a0:ba:
2c:35:8f:f4:c5:ab:87:80:39:6b:0f:0b:51:eb:b8:
35:6f:5f:19:02:3a:fa:ad:89:a1:3c:27:77:1d:16:
b5:36:de:3a:33:52:1c:ac:da:8e:6c:bf:fe:93:42:
9d:3f:2c:4d:55:f8:dd:5f:c0:b8:a3:1e:09:91:aa:
4a:17:21:5e:69:98:21:04:71:54:07:25:3f:a0:01:
0d:a1:d2:af:de:7d:52:9e:8a:5a:98:0c:95:6d:3a:
9a:76:7e:05:34:96:ef:63:5a:93:ab:45:2d:4c:61:
a9:92:f9:09:13:94:c3:f0:ab:f4:b2:37:3b:17:d7:
7d:e5:27:17:32:50:18:04:d9:b0:42:e5:c1:71:8f:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2D:A1:46:A3:FC:60:A4:B6:5B:06:68:B7:DA:88:8D:29:27:A3:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa844b0d-3e33-30e0-80c5-b9b22cd4cf33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.124.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:05:d5:63:f7:3d:27:4c:b1:a7:ab:97:bb:03:64:e8:d5:22:
f5:d8:99:46:31:5f:f2:d8:66:30:f2:d6:72:a3:22:1d:6c:e7:
1f:fa:82:92:93:02:61:70:99:83:db:63:bb:e8:57:28:8d:9a:
25:76:07:e9:60:d1:31:e7:6f:bc:1c:18:9e:b5:a8:e5:51:ed:
d4:d0:aa:4e:bf:21:a9:24:cb:39:9c:d3:93:97:ad:e7:d7:df:
25:8a:ff:5a:d1:1a:d5:ad:56:49:57:84:b8:a2:f4:82:2d:4f:
f0:2a:5d:d6:f4:81:05:6a:b9:d5:68:a0:e5:17:3f:1e:8b:51:
f3:77:ab:f5:39:b7:c2:90:b1:e2:96:7b:ed:6d:f5:46:c3:78:
f1:e8:15:f1:6f:bd:66:1f:ca:91:8d:60:f8:46:62:72:32:b9:
a1:c6:9e:3d:cb:22:b8:e3:4c:8d:ee:ba:a3:9a:d4:01:84:c7:
7c:de:6b:c9:7c:a6:38:36:c7:ba:e8:6e:86:2e:fd:33:56:a3:
22:4b:b5:7a:13:12:9c:3b:e3:47:c7:9b:e7:ad:2f:82:ea:9d:
d9:91:9b:b0:18:d0:e4:42:68:07:05:35:b1:21:7d:d0:70:e3:
b5:a4:b3:24:3c:fd:ba:69:53:98:f6:f7:12:74:6d:9e:2b:8d:
31:d1:16:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:00:46 2025 by rpki-client