Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9f17685-b8e4-3502-814f-b9355d563679.roa
File: a9f17685-b8e4-3502-814f-b9355d563679.roa (raw, json)
Hash identifier: 1Q2v1S1lzgu6d2SKo9e1XCc6+sdJJhs+sAxSxJzuEC8=
Subject key identifier: 7D:F6:0B:74:B2:F8:EB:CB:86:55:E5:CA:00:66:3A:07:D0:03:74:40
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6E23B39C158BF8309856C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9f17685-b8e4-3502-814f-b9355d563679.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33659
IP address blocks: 96.65.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6e:23:b3:9c:15:8b:f8:30:98:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=c2cce3b2-f8ea-48d2-9199-610ac425c095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:9f:f7:2b:da:ae:47:ed:ad:fc:1c:91:8a:
e3:4b:eb:d8:00:b9:de:e8:93:bf:62:24:74:68:48:
4c:75:f4:21:6c:7b:92:d8:c1:dd:82:ac:07:68:d5:
42:d9:f0:81:c8:5d:ef:a1:f3:83:22:bc:4c:47:12:
7f:d7:ff:b3:86:a4:8a:56:11:8e:4d:51:b7:4e:74:
8a:b3:9c:9c:b4:2c:8b:d3:c6:0b:cb:68:d2:c6:49:
d7:94:d1:50:74:55:a6:a0:9d:94:1c:aa:40:86:75:
9a:ee:5b:79:36:6e:b8:f2:1d:ca:e2:81:e5:35:3c:
58:e5:65:71:59:bc:b8:89:8c:0a:4e:c0:61:f7:d2:
5e:fb:f8:71:71:e8:b5:ab:89:77:d9:a0:c2:63:b5:
b9:59:31:26:be:d1:4d:01:75:1c:c1:21:44:c2:1f:
2f:fe:3a:c1:ce:5e:71:c8:1a:be:70:45:78:c0:ad:
48:f8:15:cf:5d:a5:eb:74:0d:0c:07:94:fa:c3:b8:
20:9b:54:17:80:ac:4d:a0:a8:cb:70:99:86:40:30:
3f:cf:dc:15:ec:30:72:7f:4c:9e:02:04:bc:3e:12:
3d:1f:24:8f:86:8e:e7:63:ec:49:ae:3e:25:b8:24:
ae:02:7c:5a:97:54:61:cd:53:5a:af:54:91:ad:f3:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F6:0B:74:B2:F8:EB:CB:86:55:E5:CA:00:66:3A:07:D0:03:74:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9f17685-b8e4-3502-814f-b9355d563679.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.65.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:44:35:64:d4:2e:60:3e:09:c5:65:77:f4:91:35:a7:9b:cc:
f2:d2:47:86:5c:b1:12:ee:d3:c4:80:79:79:d8:e6:41:48:9a:
b1:34:30:b2:8b:c2:5d:fe:e0:3d:5a:e5:97:27:0c:91:8f:78:
d6:81:5d:b8:b7:a2:c3:84:e9:d1:32:d9:85:77:35:75:fd:c8:
0a:16:0f:9f:8e:76:49:31:02:3e:db:f3:e4:57:d4:14:78:86:
8a:dd:75:1d:79:ac:52:c3:b6:96:1f:b7:70:7a:6e:e4:1d:27:
da:7a:2d:3b:95:f6:ef:de:20:08:00:c5:c4:ec:62:b0:63:9c:
a8:59:83:28:e1:c7:e3:2a:97:5e:5a:aa:61:8b:22:30:12:44:
2a:fb:c1:b1:30:51:0f:ab:e0:93:4c:e0:13:98:ba:40:d4:b1:
06:37:ae:71:93:8c:c5:00:3e:56:d0:7c:1a:80:c1:38:c4:94:
41:22:4e:43:41:37:80:54:7d:e6:b7:07:49:b2:38:c3:81:8b:
40:b5:43:3f:9b:99:f2:51:6d:90:e1:18:95:b1:95:9d:2e:ce:
c0:d3:7c:09:8e:38:fd:86:3c:c1:03:ab:7c:b8:a8:17:41:ca:
fd:89:96:10:7e:4d:45:ca:10:6b:43:1d:36:66:ed:bc:0c:b5:
73:c0:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:37 2025 by rpki-client