Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6a126d6e-350c-3218-8782-b483551489da.roa
File: 6a126d6e-350c-3218-8782-b483551489da.roa (raw, json)
Hash identifier: SWiiqIyjNmpaqcjrO+BdC/NUiyKnQ1X+c+m8tBiKxpw=
Subject key identifier: 39:62:63:87:98:4D:4B:89:64:1C:0D:04:9F:76:6C:CC:E3:FF:67:A2
Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial: 010D0C9F43285848C2F0BB43F658C58C85989900
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6a126d6e-350c-3218-8782-b483551489da.roa
Signing time: Mon 03 Feb 2025 15:58:45 +0000
ROA not before: Mon 03 Feb 2025 15:58:45 +0000
ROA not after: Sun 04 May 2025 14:58:45 +0000
asID: 20454
IP address blocks: 96.47.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:f0:bb:43:f6:58:c5:8c:85:98:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Validity
Not Before: Feb 3 15:58:45 2025 GMT
Not After : May 4 14:58:45 2025 GMT
Subject: CN=95218354-6f0a-4d5f-96f9-b2e20f57ef18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d6:75:68:08:9d:fe:9e:7e:8e:89:47:0c:de:
f2:db:90:9a:25:1a:db:87:b9:e9:5d:67:55:a7:09:
e7:a7:85:c5:50:c7:34:ef:eb:8a:94:30:d0:62:be:
9d:5d:de:e6:1b:41:2b:82:59:1f:80:4a:6d:1f:d4:
ca:d9:b9:ea:2a:5c:8f:3e:29:47:3b:35:3e:da:bc:
fa:12:d0:23:4c:a5:f5:5f:5a:94:19:df:db:ac:a6:
ad:87:b8:46:60:d5:11:61:0e:35:2a:cb:b3:42:30:
04:9c:80:78:8b:0e:31:4a:f4:22:ae:06:ca:26:38:
54:bd:59:cc:58:e5:cd:77:3a:b8:a0:ca:88:d7:a6:
dc:e4:1e:55:11:b6:f0:ed:12:2f:43:a9:fd:18:0e:
b5:09:24:eb:3b:7b:32:15:05:6a:ff:a2:b3:e8:67:
19:2e:23:9b:c6:94:5b:db:9f:f2:e1:fb:09:e0:07:
10:e8:42:77:fd:63:4b:fc:9f:3a:6f:26:84:bd:90:
ac:99:e5:7a:58:7e:59:bc:a1:2e:2e:97:10:d8:43:
f7:25:9e:cc:0d:8a:9b:44:6b:06:18:25:30:4e:a5:
18:5f:70:8b:ac:2b:18:33:b2:e1:02:35:87:cd:5a:
27:4b:69:73:91:11:df:74:5d:52:f2:94:e3:5f:04:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:62:63:87:98:4D:4B:89:64:1C:0D:04:9F:76:6C:CC:E3:FF:67:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6a126d6e-350c-3218-8782-b483551489da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
X509v3 Authority Key Identifier:
keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
sbgp-ipAddrBlock: critical
IPv4:
96.47.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:e5:77:84:99:50:2d:3c:fa:e9:1a:ca:b1:76:e3:be:9c:84:
f4:e7:3b:03:25:7d:0f:6e:44:80:ab:a7:00:1e:c3:81:64:da:
c2:93:74:16:db:44:d4:a5:21:1e:e5:15:d2:07:3b:46:ac:19:
75:19:54:47:35:65:b1:77:70:19:04:eb:67:1c:91:0a:0e:c3:
ec:0b:b4:21:92:cb:a2:90:c5:82:6f:a0:81:2a:df:5a:73:de:
ac:ed:bc:2e:a5:8d:b2:0d:e4:64:55:cc:3a:ff:36:bb:be:0b:
6c:5e:ad:28:48:0e:97:36:ce:12:76:e3:85:f3:da:b2:8a:7d:
35:dc:61:de:53:af:bf:c9:4d:ca:3d:34:0f:2e:ec:fd:fa:7a:
7f:36:03:ab:e3:5d:c1:ed:37:b8:d3:58:a0:0e:a5:a5:59:15:
33:d6:2b:5c:7c:3c:7d:eb:d1:92:01:74:a3:58:e0:72:af:e9:
05:79:5e:17:63:76:a0:ee:ac:41:fb:22:91:3c:a7:a3:06:b7:
b5:99:e9:55:35:f1:63:db:34:4e:89:20:2a:8d:7b:28:23:db:
e6:e6:c6:db:40:89:9d:b7:57:94:16:eb:44:c0:8d:aa:f7:40:
63:18:e2:27:be:fb:13:69:07:8f:0d:45:2e:98:82:54:f5:17:
b1:4b:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:36 2025 by rpki-client