Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ffa8800-1d0a-3f91-9e7a-2685352df010.roa
File: 1ffa8800-1d0a-3f91-9e7a-2685352df010.roa (raw, json)
Hash identifier: YaDXiD9u1kNY+DvY52C3I/t84OESEQ0df8mxYEzJpS0=
Subject key identifier: C3:19:6C:AF:95:AB:E1:B7:42:0D:F7:5D:3B:F2:14:44:7F:FE:DC:27
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BE3438F6ACE474D50AF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ffa8800-1d0a-3f91-9e7a-2685352df010.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33489
IP address blocks: 96.91.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:e3:43:8f:6a:ce:47:4d:50:af:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=f2920c44-78d4-4285-b9bd-2cfd40d5ede2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:a3:7f:96:2b:ce:f2:55:48:87:80:c5:d2:
68:7b:d0:d9:ab:2e:c5:69:2a:69:28:59:6a:e3:05:
89:94:01:78:43:07:a1:e3:15:b1:c4:18:0b:fb:34:
ac:8d:e8:7d:56:84:57:cf:d1:66:14:18:47:47:dd:
f9:92:f3:43:5b:13:6e:67:53:45:09:5a:f0:f1:b0:
09:d4:c9:c0:8b:08:7f:4f:20:14:fc:de:49:6c:37:
f9:b3:97:f9:5c:e5:02:be:80:5e:b4:48:a3:2c:a9:
87:f4:86:3f:34:41:e6:08:72:25:81:0b:1c:9f:61:
7a:8c:25:6b:1d:0e:5b:c0:9b:10:51:15:de:2b:b3:
d3:ef:1a:cf:a3:af:73:78:93:0a:53:6a:2f:0b:f2:
ea:8f:8b:e3:99:57:4d:95:4a:b1:ea:0c:11:33:c8:
c3:d9:2f:d1:10:4c:f1:ee:81:70:66:5f:ba:4c:65:
39:de:1d:92:1c:6c:c5:89:0d:63:eb:3b:45:c0:bf:
32:42:aa:cc:1f:54:d6:65:32:01:28:59:76:9e:61:
ef:a1:aa:40:e1:67:e9:f8:b8:6f:f0:cd:1b:d1:3a:
67:9b:7c:22:37:a7:18:54:20:a0:e1:39:8b:a7:05:
fd:a2:c8:46:e2:f1:14:dd:1f:2b:a8:7e:d0:89:76:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:19:6C:AF:95:AB:E1:B7:42:0D:F7:5D:3B:F2:14:44:7F:FE:DC:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ffa8800-1d0a-3f91-9e7a-2685352df010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.91.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:65:90:93:f4:76:e6:c4:ee:aa:dd:7a:24:b1:88:a4:63:1d:
e0:9b:fd:fe:08:84:a2:f6:81:19:1e:93:a4:62:2c:37:31:01:
63:a0:23:97:10:1f:cb:a1:83:08:97:0d:e3:c4:aa:3f:ce:0a:
b5:ca:01:35:9b:a3:92:71:8b:96:f4:82:be:88:7a:16:fb:d5:
c5:e8:5d:3a:43:28:ce:77:30:bd:57:27:63:77:68:a9:35:eb:
ee:0b:1d:af:3e:39:4c:fd:fd:4f:60:d7:07:60:9f:61:57:7f:
fd:f0:4b:7b:60:77:49:51:5e:9a:bf:a4:06:f7:bb:12:e0:5f:
d8:9e:25:4b:98:a3:dc:66:c3:67:3b:44:2c:22:0d:7d:3c:45:
b3:a7:b9:60:84:19:0c:28:42:4d:7d:03:89:99:6b:e4:e8:a1:
79:56:00:a9:6d:3d:fa:a5:39:d2:aa:bb:c4:0e:43:16:f2:88:
6f:50:04:ae:8d:e9:88:a3:bb:55:a4:b3:4f:f6:cb:3c:ee:53:
2a:09:2d:fe:1e:43:70:5c:49:b1:47:3f:ef:eb:da:65:47:89:
c6:88:5e:a5:20:f7:ca:4d:dc:12:b6:52:f3:72:d1:d8:be:7b:
94:b5:73:19:48:51:73:e7:59:5a:a7:f8:f6:be:68:b0:bc:df:
83:dd:b9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:50 2025 by rpki-client