Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/b40c47e3-8988-3029-b819-5be6fc4d7af7.roa
File: b40c47e3-8988-3029-b819-5be6fc4d7af7.roa (raw, json)
Hash identifier: KHMarPx1yk3wDeLZtPQ3YM/cKuZs+elVn/Z0gPGTCrU=
Subject key identifier: DE:F2:49:53:6A:B8:CC:CB:DE:AF:07:A8:5B:85:E8:74:82:1C:F8:57
Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial: 010D0C9F43285848494560C121DB2A4034459380
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/b40c47e3-8988-3029-b819-5be6fc4d7af7.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 399244
IP address blocks: 76.164.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:60:c1:21:db:2a:40:34:45:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=de52b699-a413-405e-b302-15ae5eb6582c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:f8:79:40:3d:49:8a:9d:13:6e:d1:08:71:
80:b9:4c:5f:29:e6:d0:fa:31:25:da:36:76:b8:84:
37:d9:e2:81:52:6f:44:6b:64:ff:4e:f5:68:c6:b6:
6d:99:ea:88:dc:cd:d1:59:ef:b1:d4:06:82:40:62:
33:41:d4:d3:fe:22:ba:88:54:11:08:8c:3d:07:0a:
52:4f:11:62:44:5c:e2:22:52:55:c9:77:d6:c9:de:
bc:24:8b:b2:f5:83:e1:fd:00:46:a5:17:9c:26:fe:
d6:ed:2a:4e:0b:c3:c6:93:44:45:30:1d:26:bb:dc:
8a:c6:7b:1a:48:f9:3e:ab:c7:e8:e0:01:bf:bd:9c:
e4:af:49:8e:09:f1:ff:96:69:1b:03:52:18:e0:a0:
1d:92:fd:26:b8:d0:c1:22:66:59:39:25:8d:a7:08:
bf:be:90:54:99:93:c4:a7:ef:ba:ed:dd:50:2a:75:
de:86:31:10:88:0e:75:70:b8:f0:64:87:3b:93:ba:
ce:8d:69:2e:b4:5b:10:1c:ff:a1:7c:37:f3:3d:25:
d2:47:f7:a3:b1:93:8f:c4:13:9d:f2:39:62:94:57:
62:f0:27:23:38:aa:6a:fe:ca:09:ce:c6:54:f2:b5:
c7:c5:8e:e8:e8:53:c7:61:5d:51:cc:13:b8:ba:b2:
a8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F2:49:53:6A:B8:CC:CB:DE:AF:07:A8:5B:85:E8:74:82:1C:F8:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/b40c47e3-8988-3029-b819-5be6fc4d7af7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
X509v3 Authority Key Identifier:
keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
sbgp-ipAddrBlock: critical
IPv4:
76.164.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:e8:ad:fb:c7:f8:de:b7:16:ad:39:c4:03:3b:78:d8:08:0b:
34:02:ef:6d:b1:02:f5:e0:65:08:39:c6:26:d7:c4:87:b6:ce:
f8:5d:12:18:6e:d8:c0:3f:bd:c5:8e:16:9b:4b:2d:64:44:03:
7e:45:db:c6:af:c9:d8:db:95:0b:c8:e4:91:e9:8b:d5:5c:b5:
eb:c3:0d:47:ee:6e:cf:3b:7f:43:99:9b:92:fe:8e:da:95:36:
ea:f7:c3:bd:47:01:35:4e:7a:c0:a5:f6:91:7f:67:6c:8d:cb:
bd:4d:a0:2a:93:06:75:0a:62:ef:58:da:02:52:fc:5a:41:8f:
d3:49:dd:9f:33:2c:1c:69:60:f1:d9:33:ec:32:7f:b2:12:d7:
08:ed:36:be:0f:0d:00:f1:ec:5d:59:33:9e:c9:9e:e8:55:5d:
94:a8:0c:9e:25:f0:b1:d5:2e:85:39:a3:6e:1b:17:cf:66:8c:
b4:b5:fd:3a:6d:d3:8d:ec:c6:b7:da:b4:45:92:31:6a:3b:a3:
fe:b7:51:31:19:a2:d3:f8:3e:49:53:94:41:69:49:9c:6e:da:
7f:51:89:ef:8f:89:7c:69:1c:77:54:8c:49:0f:cc:20:78:e0:
81:19:3c:e2:e7:51:5c:67:ec:65:54:05:56:dc:68:18:1f:1b:
5e:a7:77:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:09 2025 by rpki-client