Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa
File: f42044dc-4bba-3889-9d93-7be101a8b14b.roa (raw, json)
Hash identifier: pU6f9RUq2fFdfEc0GsnLh2Xgjiy3xmmo6EUXg6XA+vs=
Subject key identifier: 61:3D:CB:2A:11:F9:55:12:D6:8E:AA:57:2B:45:BB:6D:1F:CC:CC:9C
Certificate issuer: /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial: 010D0C9F4328584877CE20D77EA5E00EBECA8C80
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa
Signing time: Tue 07 Jan 2025 18:03:24 +0000
ROA not before: Tue 07 Jan 2025 18:03:24 +0000
ROA not after: Mon 07 Apr 2025 17:03:24 +0000
asID: 400928
IP address blocks: 76.164.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:ce:20:d7:7e:a5:e0:0e:be:ca:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Validity
Not Before: Jan 7 18:03:24 2025 GMT
Not After : Apr 7 17:03:24 2025 GMT
Subject: CN=929b4d5b-c936-4597-8301-8f7ad9142272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:f9:ce:9d:01:9a:c2:b8:d4:48:27:0f:43:
d8:b5:1e:7f:59:91:1c:71:83:0d:80:61:50:ed:8d:
c8:ba:7b:c8:a5:b5:53:dc:fa:65:ec:4d:9e:b7:21:
08:76:9f:8f:dc:83:c8:2b:02:0b:1f:a8:65:84:6a:
45:35:d1:61:10:e3:dd:96:ff:2a:4a:a3:4d:4e:a3:
1f:49:84:c7:01:29:e8:6c:1f:33:7c:95:04:aa:9f:
08:0d:1c:bc:98:4e:08:3e:b5:a9:2a:32:f7:d1:c1:
9c:bc:c2:ab:e6:df:92:c6:2c:0d:00:c4:1b:f9:94:
61:26:21:e2:e5:75:ba:be:8e:88:6d:03:ac:8a:99:
25:cf:99:c4:61:ea:90:2b:19:8b:8c:1a:0a:09:cf:
1d:c7:a1:a5:79:4b:c0:9f:b2:e1:c2:3e:8c:ef:43:
7c:40:8f:ca:b2:84:8c:be:b3:f5:bd:96:47:3e:66:
e5:4f:73:45:fe:f8:15:31:c0:ec:cd:08:7b:d4:fe:
be:43:04:46:01:a5:9b:f3:d0:a5:be:5f:80:a7:50:
76:c0:50:b8:d8:db:c5:32:a3:2b:32:3f:11:9f:54:
e0:b6:53:5c:bb:97:a6:11:e5:20:fe:6e:a8:31:83:
3f:07:3d:07:aa:a6:8d:9b:4c:13:fa:2c:fd:0d:c6:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3D:CB:2A:11:F9:55:12:D6:8E:AA:57:2B:45:BB:6D:1F:CC:CC:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
X509v3 Authority Key Identifier:
keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
sbgp-ipAddrBlock: critical
IPv4:
76.164.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:05:56:7f:bf:a2:21:c7:c6:f1:09:8e:9b:90:5c:f9:31:2e:
71:c8:06:e0:ac:a5:81:85:f9:bc:98:d6:fa:1a:d3:68:99:a0:
ff:49:95:69:7b:8e:ef:29:29:dc:0e:f1:d0:58:32:02:ca:b3:
28:21:ce:c3:f1:1c:c2:f9:cc:99:f3:3f:0b:26:44:18:65:d0:
63:e9:b5:18:87:89:7f:25:43:ac:88:b0:c7:4d:e2:02:0b:e0:
29:fb:3c:80:f8:1e:0e:d2:31:ca:d4:7c:c9:40:3a:29:32:e5:
09:05:e7:94:b6:29:41:4c:81:0f:02:2e:dc:02:cc:5f:e0:de:
31:1a:79:c4:3b:93:14:d6:7d:fb:68:81:e5:73:48:de:d9:c4:
f5:14:0b:d7:f5:35:50:39:25:10:24:09:48:7f:db:10:d3:17:
82:64:be:79:43:80:3e:e2:07:6a:42:71:78:41:e9:d9:7f:28:
19:80:0c:48:e3:1b:da:b1:eb:11:a6:92:7d:5b:20:ec:74:0e:
97:3c:ab:36:9c:ca:8e:15:96:12:8e:24:fd:61:10:6f:b1:cc:
ee:c5:cf:d8:cb:64:7d:ac:2e:cf:7e:4e:8f:a9:76:74:ea:b4:
d2:a3:22:21:18:a6:d9:8d:41:83:60:59:25:c6:d4:30:3d:cf:
15:6e:d2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:40:16 2025 by rpki-client