Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5184ba54-3241-3be9-8caf-c60bcaf2a55a.roa
File: 5184ba54-3241-3be9-8caf-c60bcaf2a55a.roa (raw, json)
Hash identifier: vENzA+oBDkgYrlQLphtF1SgHQFRrVxU1AoRClFKWMQE=
Subject key identifier: 33:2C:16:D2:EB:48:F8:35:06:EF:6D:79:A5:EF:BC:FF:E3:8A:59:9A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BADE2D916FAAA79F13F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5184ba54-3241-3be9-8caf-c60bcaf2a55a.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33655
IP address blocks: 96.216.23.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:ad:e2:d9:16:fa:aa:79:f1:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=2f4256c7-cd98-48c0-87e4-473836d309fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:ab:d2:5c:33:96:85:95:d0:02:c8:0d:0c:
4f:30:82:31:41:fa:05:70:59:ac:9e:e3:41:6a:52:
1c:a7:d6:ce:7a:87:3c:ae:9c:19:5d:01:40:65:75:
df:a3:18:a8:38:a8:c2:ba:ec:8e:51:8d:d9:b4:8b:
58:bd:d0:6b:15:18:26:e5:2e:fc:15:5b:97:3c:a4:
e4:16:cb:ea:bb:99:be:94:8a:d0:3d:6d:50:11:3c:
6e:c6:c0:38:23:45:e4:d5:1d:16:e9:1e:6c:c6:38:
9d:46:b3:01:14:39:9c:b4:22:f0:8a:40:85:2a:5e:
4e:4f:93:67:29:3d:ba:c7:91:e9:dd:ec:81:d1:02:
33:53:6b:59:8d:0e:bd:7a:88:e7:0f:2e:b9:4d:fd:
a1:84:1e:23:ca:48:4f:92:1e:0e:ec:c9:0b:e4:77:
bd:94:e9:be:cc:4d:d1:2b:ed:10:5d:32:15:e5:78:
18:77:5f:98:3b:22:4b:01:4a:93:63:6c:85:42:1b:
d8:0c:3d:c5:a8:92:e1:59:5a:7e:4e:e8:8a:da:37:
3f:7c:25:da:29:9a:3c:d9:39:32:92:b6:18:b8:6e:
a6:78:9f:cd:e4:da:f9:b3:05:ba:24:1e:c2:59:f5:
7c:73:40:fb:ca:18:2e:be:a7:1e:f4:00:bd:f3:12:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2C:16:D2:EB:48:F8:35:06:EF:6D:79:A5:EF:BC:FF:E3:8A:59:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5184ba54-3241-3be9-8caf-c60bcaf2a55a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.216.23.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:24:9b:ad:92:b0:89:8f:aa:76:bb:27:5e:eb:ae:ff:16:00:
ea:03:c4:be:17:d1:ab:55:a1:8b:c9:13:c3:58:2c:31:81:f6:
49:06:7a:5e:e1:c3:3b:ed:47:05:a4:5d:0f:c0:4d:9d:64:40:
aa:cf:ac:1d:a3:4b:f3:f1:be:f8:f4:88:1c:be:2b:45:a2:81:
b1:ae:04:d5:11:25:0f:a3:ad:bb:81:5c:46:41:9c:f4:5f:96:
4e:32:ea:c2:ec:0d:1b:f8:9d:ea:e1:2d:76:91:f8:c0:35:e1:
f8:a5:2c:07:1a:55:2c:e7:8b:ac:d0:18:c8:10:08:a0:13:15:
c1:b9:d7:f7:dc:f0:45:ad:7d:5b:37:0e:56:e5:e0:ae:da:3d:
b4:2e:e3:47:88:b5:82:18:4c:6e:a4:6f:91:3f:75:77:ab:c2:
b9:94:f6:56:10:89:24:27:61:df:c2:75:5d:20:4d:61:44:58:
5f:85:fa:f4:db:26:a6:c1:6a:2b:06:61:f3:14:df:1a:a4:ba:
e0:c9:5c:e2:f2:bc:a3:bb:d7:e0:77:c6:34:5c:a0:2a:a5:a6:
a3:d9:92:72:10:bc:b5:ed:84:31:12:b5:1f:c7:86:a7:0c:8f:
d8:a2:8d:2d:97:cf:b4:57:15:19:fa:31:cb:a9:55:5a:1a:c5:
8b:df:e5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:36:07 2025 by rpki-client