Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ecf5fcc-b8d2-30bf-997e-c4a4c1c81e7e.roa
File: 5ecf5fcc-b8d2-30bf-997e-c4a4c1c81e7e.roa (raw, json)
Hash identifier: bkNc8+w90xjcCnO5V6kYxKfFUvZqW+nBXnHaCkKEzNM=
Subject key identifier: 5C:26:5E:99:89:DE:61:9B:CB:E3:63:1E:00:56:1E:AA:B4:99:17:28
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F63AE556E324FEC47D8700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ecf5fcc-b8d2-30bf-997e-c4a4c1c81e7e.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 96.107.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:3a:e5:56:e3:24:fe:c4:7d:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=3752c653-baf8-48ed-9326-83a890631a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:a2:ac:4f:9e:6c:82:d7:0b:4e:d0:de:e8:
de:d7:81:6e:eb:31:ad:b3:4c:2c:52:42:1c:89:1e:
09:cf:49:19:d0:3a:00:47:8b:d1:1f:8a:7b:df:f4:
50:5c:b3:87:ae:bf:1c:45:d5:49:7e:aa:16:75:a1:
9e:3b:74:f5:73:30:e2:36:a9:68:1e:75:2b:ba:89:
2d:f9:ff:f2:8e:e5:02:e6:bd:7f:09:41:ee:61:0b:
4e:a9:ca:c1:9b:b1:cd:7c:4c:c8:1d:70:bf:5e:ff:
f4:7a:3b:1f:3a:bd:2c:5b:ca:68:98:5b:2d:97:00:
d9:a6:6a:06:fc:3f:f8:5c:31:41:12:49:f2:de:2c:
65:f9:d9:50:59:c8:5c:1c:53:08:18:d6:c0:c8:74:
b3:48:d5:16:5a:62:5f:63:92:fa:41:0f:c1:e4:50:
eb:ca:59:ae:f7:ff:cd:2b:70:3d:28:3d:9a:2f:f5:
fb:f0:68:f1:09:63:31:2b:a6:5e:03:a7:93:9d:2c:
80:f1:87:08:14:3d:93:eb:38:f5:29:8e:ad:48:7e:
12:8c:42:e1:33:0d:8c:5b:72:18:13:59:85:1e:a7:
cd:63:5d:17:f4:4e:fc:9e:09:e9:43:af:7a:79:6f:
24:17:fb:82:6d:f0:4f:18:d5:a7:db:c9:f2:4e:b7:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:26:5E:99:89:DE:61:9B:CB:E3:63:1E:00:56:1E:AA:B4:99:17:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ecf5fcc-b8d2-30bf-997e-c4a4c1c81e7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.107.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:ee:ae:8e:59:26:0a:38:2f:51:e9:a9:b9:19:25:c4:c5:47:
c6:12:90:ac:85:24:bd:d5:d1:8d:af:f5:eb:ce:01:d0:ae:c8:
60:d2:18:d9:21:fc:80:bb:c6:64:fa:22:e3:94:4c:a5:ee:2b:
3d:19:b7:21:55:06:9a:c5:a1:df:e1:cc:1d:a1:ce:f7:07:41:
82:25:4b:2f:a6:35:f1:f4:d8:3c:79:d2:ff:4d:d5:77:a3:8a:
e0:bf:58:b1:a0:9b:22:32:f7:7e:98:83:29:75:51:9d:27:09:
e5:97:e7:9c:08:7e:13:00:76:ff:bb:8f:2b:bd:be:ec:86:25:
20:65:32:db:51:00:68:08:b0:b2:d0:cc:d7:4b:e0:34:83:59:
c1:88:84:96:f2:76:0c:2d:2d:53:3f:1d:77:5d:77:22:9f:05:
ed:37:23:48:c5:1f:22:63:14:8e:3a:bb:7f:0a:a9:bf:d6:45:
5d:db:9b:73:2d:4f:4e:29:75:95:32:c8:90:db:c0:78:eb:f9:
2b:0c:45:73:f7:66:d9:d1:ae:38:2c:b5:c6:30:ec:43:9d:51:
28:2c:e6:50:5a:d9:ed:f5:0d:89:16:1c:59:22:a2:f4:7a:3d:
d3:b9:b1:20:88:81:e5:d9:23:cd:47:f2:ef:72:cc:20:0b:a2:
a2:2e:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:06 2025 by rpki-client