Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1989ba38-ef61-35ac-b609-32f9b7651f29.roa
File: 1989ba38-ef61-35ac-b609-32f9b7651f29.roa (raw, json)
Hash identifier: TWBHO3szol+eX7fKY/lPNtYRHFAXyU6OJikRwLp/t4k=
Subject key identifier: D0:D3:70:4B:78:C8:15:03:70:1F:59:77:1F:78:F4:DB:99:E7:DB:35
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6DFFA87EF9C84FE34BF0E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1989ba38-ef61-35ac-b609-32f9b7651f29.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33491
IP address blocks: 96.90.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:ff:a8:7e:f9:c8:4f:e3:4b:f0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=c2ebd115-57c0-43d6-ad9e-8d58ce592e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:e1:9d:47:f4:15:c8:01:ed:a5:14:93:c8:
ac:4c:34:a2:bb:cd:42:8b:e8:04:63:fd:a1:dc:01:
fc:57:d1:84:05:c7:8c:0b:36:dc:c4:10:48:91:f1:
25:96:3f:34:88:fc:43:47:6e:87:1c:c0:05:bb:b3:
8d:49:ef:10:f6:87:03:69:b3:64:13:ac:ee:e1:bf:
7b:85:1a:49:cc:68:c4:a8:1e:04:3e:5c:4b:fe:ba:
84:ee:6a:90:74:2a:26:78:d4:17:8c:e4:8b:9e:19:
ee:ab:b9:f3:d7:b4:c3:df:16:91:38:d2:6f:10:0d:
48:f6:52:eb:6d:f8:96:97:6f:c3:81:cb:8a:f6:05:
55:97:d0:ca:d7:0b:00:34:34:04:0d:17:90:a5:f3:
0e:a5:b1:5a:2e:0d:82:e5:66:5f:59:4a:35:a7:a8:
94:05:a7:64:fb:61:05:6c:a5:f8:38:d2:ca:2f:08:
ed:ba:85:22:54:ff:6e:a4:0b:e7:59:d1:7d:97:f8:
e5:49:8b:bb:c1:a6:f9:17:19:27:74:a3:a7:b6:70:
16:ec:2b:9a:8e:43:ba:03:19:b2:0d:09:24:52:cf:
f3:c6:de:5c:45:91:7a:1c:31:44:13:8b:aa:37:2d:
be:80:29:4c:09:c3:99:21:7d:16:69:32:cb:ec:95:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:70:4B:78:C8:15:03:70:1F:59:77:1F:78:F4:DB:99:E7:DB:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1989ba38-ef61-35ac-b609-32f9b7651f29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.90.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:19:0f:4a:ae:d8:ce:c3:31:02:0b:ee:fd:5c:47:96:94:34:
7e:d1:ec:5e:31:7c:9a:b4:8a:cc:37:81:31:d0:47:80:e4:14:
64:99:6b:99:58:19:d0:8c:c2:8f:2c:4e:fe:ad:8f:f0:e4:d0:
da:72:10:e7:da:90:7d:e9:26:bd:26:4b:de:ec:76:2f:70:04:
c8:31:34:93:46:79:37:43:e7:fb:8f:45:2f:8d:f0:34:04:0b:
e9:c9:31:78:cd:6c:40:dc:2e:88:d3:42:64:b0:13:3a:88:61:
44:0c:fd:20:95:7d:2d:3b:10:fe:3a:a3:19:96:4f:90:45:d2:
15:b2:60:c3:9f:6f:4e:c0:90:f5:2e:71:44:22:08:c9:be:b2:
aa:1c:d9:64:9c:7e:80:ea:28:d7:72:e1:bb:ad:61:f8:ae:54:
5a:44:8f:b4:a1:97:95:db:c0:29:35:a2:f0:e9:0f:5a:20:af:
40:19:70:62:ca:80:53:0c:6c:10:fb:8d:3a:4d:6b:0e:33:65:
d4:a4:f5:3e:06:5d:5b:46:20:11:1a:3c:7f:fb:f3:05:58:a1:
be:20:32:d6:42:7e:d3:fb:c9:4c:4f:e4:f4:55:9b:3a:94:d1:
42:51:87:fd:2f:25:e2:76:76:c5:69:83:c4:0e:10:89:30:4a:
8b:b5:e8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:55:32 2025 by rpki-client