Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c817c828-6f76-3ab7-8060-c46888bac152.roa
File: c817c828-6f76-3ab7-8060-c46888bac152.roa (raw, json)
Hash identifier: kI3l/5GzAB3wjzcnGQqCqIZhG96Kzt4HgEQdeudLwuE=
Subject key identifier: 7B:B3:2B:49:6D:6E:03:9A:56:52:6A:7A:98:C6:58:15:50:96:AE:41
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F644FE9E20388E539CDAA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c817c828-6f76-3ab7-8060-c46888bac152.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 96.96.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:44:fe:9e:20:38:8e:53:9c:da:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=9894a74f-d6fc-4b2e-b4f2-a3e9d98d21f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:41:1f:69:f8:b0:88:7d:9a:bf:f0:9c:a8:
1a:a3:54:eb:65:f7:51:d2:8a:52:01:a9:7f:9a:64:
1b:bd:5c:94:b6:38:8e:06:59:14:35:a9:f8:4d:d2:
f7:1a:ab:c7:be:84:05:ad:45:73:71:91:4d:87:f4:
60:62:82:5d:74:c8:f7:0a:56:d6:b5:01:c5:20:66:
e6:2d:b9:4b:c2:46:46:7e:fd:b9:5a:fa:f9:92:31:
87:34:74:3f:cd:db:38:00:39:88:60:04:53:64:55:
7a:63:1e:bf:a3:c9:a5:02:6c:8c:eb:f2:bd:f9:78:
74:4d:63:ac:bf:07:a8:89:75:00:a2:aa:3f:bd:44:
dd:1c:b1:19:c1:9e:ab:1d:87:a2:28:e4:72:58:2e:
c1:87:69:85:47:2b:03:ca:74:ab:0f:33:ea:80:8e:
f5:c3:36:b2:87:51:05:5c:9a:79:29:62:d8:17:72:
56:90:2b:c5:eb:ae:64:3d:29:f2:f4:e3:98:e3:3b:
46:0d:ff:fe:18:45:2d:74:29:fb:1b:59:b6:cf:f2:
8d:1f:68:07:32:26:86:86:08:d1:af:92:ce:e2:72:
26:81:e7:47:fc:d2:47:00:47:d9:2b:e5:d4:15:30:
1c:a6:0f:10:63:95:14:2b:4f:bf:70:50:14:cb:57:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B3:2B:49:6D:6E:03:9A:56:52:6A:7A:98:C6:58:15:50:96:AE:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c817c828-6f76-3ab7-8060-c46888bac152.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.96.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:6b:59:cd:67:fa:5a:80:0f:f9:fc:06:73:32:0c:98:7b:b6:
e9:18:34:45:58:78:4a:f0:2b:56:e3:7b:2c:1f:5a:1e:6d:26:
44:97:80:f0:a9:43:e9:0e:af:52:60:d7:c1:eb:be:83:53:28:
e5:08:cd:6a:73:2f:15:9d:a9:cd:90:07:b6:d9:3a:c1:1f:2d:
5d:3f:be:3b:d2:c7:23:80:fb:be:5e:e2:3a:5e:5c:02:63:84:
67:bd:61:61:bc:12:16:25:20:32:e9:a7:9a:d7:16:f1:56:e1:
dd:52:70:5a:3e:18:ec:5a:c1:4a:5a:10:30:f0:f3:31:d8:f2:
d5:70:9c:bd:ca:6b:81:71:5f:a2:8b:77:f3:7d:21:12:b4:10:
67:ff:7f:b7:d4:e2:ef:76:5d:31:c9:a8:5e:a9:92:5f:d7:41:
6a:10:d6:c7:23:33:cf:63:fd:ba:19:79:65:ac:74:43:6c:4d:
88:58:89:5e:c1:9e:7e:c5:b8:2a:6d:64:eb:91:f7:8e:3c:58:
20:a2:33:0a:6c:59:6b:f4:a2:d0:9b:cc:4d:e6:50:63:eb:61:
87:35:6e:b8:56:5e:6c:11:c0:a0:3e:ba:a5:1e:d0:44:31:81:
d7:3e:9d:13:a6:a9:83:fd:a5:c7:9e:94:42:a5:35:f1:df:1a:
a4:48:dd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:21:52 2025 by rpki-client