Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8119298c-1fac-3d2b-a656-b7540129ae06.roa
File: 8119298c-1fac-3d2b-a656-b7540129ae06.roa (raw, json)
Hash identifier: 5m0LFy5KOTirTwOSb5eUhfgwsq7Ia6/5ZkVTxIIxhM8=
Subject key identifier: 28:57:44:73:0B:F2:F8:1A:FC:5D:94:E2:57:E9:45:0D:6A:2D:6F:D1
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858486C2B3016F488061B92AB21C0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8119298c-1fac-3d2b-a656-b7540129ae06.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 5650
IP address blocks: 76.191.96.0/23 maxlen: 24
76.191.98.0/24 maxlen: 24
76.191.100.0/24 maxlen: 24
76.191.102.0/23 maxlen: 24
76.191.104.0/23 maxlen: 24
76.191.112.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:30:16:f4:88:06:1b:92:ab:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=947063b5-6c17-49c9-980c-92ca3e122c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9c:d1:19:be:81:bf:f6:50:ac:f0:87:f0:10:
d6:2d:49:fa:ec:08:bf:30:01:fc:f4:1e:1d:c5:91:
c3:bb:f9:b1:19:d8:68:bb:1d:fa:82:43:84:a6:e3:
bb:2f:04:ed:9d:f7:f9:23:10:21:c1:31:dc:12:5d:
23:db:d0:a8:22:59:7d:93:d5:35:b3:24:f6:84:cd:
17:d2:a7:9f:e5:1c:94:35:a0:8c:b9:da:1a:d8:41:
10:05:84:df:46:ea:01:7f:91:d0:36:aa:3e:4b:17:
29:89:ea:83:68:7d:81:9c:02:54:a5:e8:c9:80:e1:
84:95:d9:b9:7b:e3:b8:ad:f3:d7:06:31:b9:dd:8b:
c6:87:91:89:de:e0:47:2a:74:2c:eb:67:5d:01:cf:
21:21:bd:52:69:7b:b7:84:2e:e8:53:61:c9:62:cf:
14:1d:ac:55:a5:a5:ac:a5:f4:d9:73:87:8f:f4:c2:
7c:c1:55:c8:ab:47:39:fe:27:5f:e2:e9:3a:48:59:
67:df:b9:c0:dd:d8:38:c2:7e:2c:a2:03:67:0d:0f:
c2:0b:0e:26:cc:9f:95:5a:59:86:af:9d:b5:03:ea:
d8:f5:47:63:08:eb:f3:17:46:37:7f:7a:fc:94:a0:
00:46:00:a6:7f:ca:c2:2b:07:e0:c5:ca:0c:03:6e:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:57:44:73:0B:F2:F8:1A:FC:5D:94:E2:57:E9:45:0D:6A:2D:6F:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8119298c-1fac-3d2b-a656-b7540129ae06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
76.191.96.0-76.191.98.255
76.191.100.0/24
76.191.102.0-76.191.105.255
76.191.112.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:4d:fa:71:c2:97:3a:d0:2e:8e:62:33:3d:dc:b8:74:f4:49:
3e:ec:8c:28:2e:ee:7c:1f:05:f1:a4:08:bb:da:0b:88:8a:a4:
f1:45:a1:3a:9f:17:a3:7a:63:56:a6:2a:5a:79:89:45:fa:39:
a6:95:61:0e:e2:34:b3:1c:57:5e:d0:89:ee:7b:9b:13:ac:64:
96:e6:4b:7b:c0:43:bf:8e:92:21:26:1a:ce:f1:cf:cf:91:6b:
60:7a:e0:9c:a4:a8:33:da:bd:fb:22:cd:d2:0a:8e:76:c4:26:
19:6d:86:e0:e6:6b:28:1f:9b:5d:4d:41:06:46:16:11:b8:19:
10:76:f7:e6:b2:f5:6d:84:68:f8:38:d1:1c:0b:56:3a:24:45:
8f:ef:60:59:c9:29:f8:df:c9:a6:7b:d9:52:77:58:76:19:f4:
ba:0d:c4:dc:3f:5b:3e:e0:b4:40:75:c1:f2:a3:78:59:6a:f0:
86:bb:ec:81:6b:9a:8d:5b:d9:8f:7f:67:0f:1e:58:e2:54:06:
fc:00:ce:4b:60:3b:85:d2:a9:16:fc:bf:27:b5:8a:fa:c6:27:
65:3a:79:52:96:fb:c5:1b:c8:43:53:f4:84:c1:ad:c1:e8:7a:
81:f7:f3:39:03:55:85:02:e2:94:d8:6e:36:8a:c6:76:2c:c3:
20:dd:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:23:55 2025 by rpki-client