Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc76496b-6876-3606-9a28-c64c856346f3.roa
File: bc76496b-6876-3606-9a28-c64c856346f3.roa (raw, json)
Hash identifier: 9gZhSrxvbZsIhcixBJEDOm6aJkNqhIg3ba9/kzDtrnM=
Subject key identifier: FD:09:2B:7A:48:07:89:9B:C0:96:45:8B:90:86:17:5C:FB:9A:A0:9E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F65465556806D5118D7440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc76496b-6876-3606-9a28-c64c856346f3.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 96.114.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:54:65:55:68:06:d5:11:8d:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=eadf5cf8-7a45-47df-af1b-45af20d30e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:ed:91:0d:38:36:86:cc:ad:63:21:6e:0e:
92:2a:b7:b0:97:a8:b2:85:f2:4d:3b:98:93:cd:cd:
a9:eb:fa:00:9a:ae:07:c1:5a:d5:66:11:79:b4:7b:
12:4f:91:8e:1e:3d:82:74:7e:b6:f6:f1:ce:7c:14:
a2:d3:57:ee:ab:52:db:04:4e:f3:4a:a3:ae:19:be:
54:76:4b:59:10:76:54:53:5d:11:ad:d9:88:e7:bb:
7f:54:4f:ce:25:b6:3b:24:b5:10:04:3c:33:9f:bc:
14:29:d7:00:37:40:f0:10:77:a7:04:5a:87:51:df:
a2:80:e4:3c:3e:eb:68:ba:89:e1:3c:64:b9:43:be:
59:6a:54:01:b5:5d:10:88:77:db:7c:12:c2:27:97:
9d:13:53:aa:27:5a:43:64:c6:d5:13:04:13:08:06:
61:4e:f4:a3:19:72:fe:92:bb:48:e2:98:a2:b6:0c:
da:84:2a:3e:90:8e:27:e8:60:eb:c4:72:0e:ab:b5:
c6:e0:19:52:fb:e2:91:ca:16:11:ac:ef:04:8b:87:
b4:35:29:bd:be:9f:b2:63:c8:1e:9d:d7:d1:7f:19:
f9:0e:b5:53:29:91:21:a4:54:53:8d:32:7f:3c:de:
22:53:91:d1:84:e1:9e:26:5e:26:9e:21:d5:54:d2:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:09:2B:7A:48:07:89:9B:C0:96:45:8B:90:86:17:5C:FB:9A:A0:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc76496b-6876-3606-9a28-c64c856346f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.114.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:55:62:02:72:4f:a5:f5:96:7c:74:fc:5f:f2:77:f3:78:18:
65:ed:35:ce:c5:71:76:9d:69:f4:b6:60:12:db:34:39:07:a6:
1b:47:2b:38:4e:ae:9c:b9:15:69:24:36:eb:33:72:57:b5:c6:
30:d7:de:5f:9b:85:5f:0b:80:2c:8f:33:bf:ee:27:54:31:de:
42:d1:53:d8:7e:95:e4:9d:57:45:e5:7d:d5:6e:75:91:fd:aa:
af:b6:a9:15:78:34:e5:49:72:44:f3:fc:59:70:c1:fb:17:68:
34:19:37:5d:35:48:6c:ce:c0:2e:78:8f:d1:7b:ed:54:26:ee:
56:44:74:d0:44:bf:97:53:e4:50:91:a7:19:d1:f7:b8:03:3e:
2a:80:ac:db:50:bd:03:21:53:1d:a8:98:64:62:33:3c:be:d5:
e8:80:36:f6:64:7e:34:84:9c:fb:25:81:4d:55:eb:d0:ba:ba:
a3:33:5a:6c:1a:30:a7:07:8b:e1:63:97:6b:14:54:2c:08:1a:
16:be:21:de:c2:7a:33:bc:fd:a4:76:97:db:c9:67:38:d9:70:
34:e8:67:4c:35:35:76:05:ea:4d:a0:97:32:b3:30:e5:d9:60:
81:78:7e:fe:b2:2a:52:76:b2:d8:30:16:8c:80:be:cc:e8:9b:
c5:ae:20:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:18 2025 by rpki-client