Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de524879-1127-3723-93aa-b832473e49e5.roa
File: de524879-1127-3723-93aa-b832473e49e5.roa (raw, json)
Hash identifier: KQuWK3YMljMxSFUZa6Qw9o4L1cu4hZlzH7X6WlhSQoY=
Subject key identifier: 21:A4:20:10:39:A9:1D:58:91:70:B6:5E:5D:5B:54:1C:F1:CF:5F:8F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D05610907F11C293D9A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de524879-1127-3723-93aa-b832473e49e5.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 96.94.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:05:61:09:07:f1:1c:29:3d:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=1c614959-7a49-4c85-9b10-ed16f4dce00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:bc:ce:66:08:12:fa:10:f2:23:ef:6d:d5:
6a:b3:10:d4:c8:68:ee:02:b6:bc:85:33:58:75:bf:
0e:86:9b:64:95:55:3f:5a:1a:96:79:d0:02:83:f4:
8d:52:2d:00:09:8e:c7:0f:39:6d:9d:b6:80:6c:9d:
41:5e:66:2e:29:66:ae:f8:51:0e:ec:8c:fd:59:5a:
39:e8:e7:46:e9:19:eb:35:90:6d:b9:35:d2:05:1f:
19:91:3e:8e:b2:5b:85:bf:7f:3c:1b:5a:82:09:be:
bd:5e:e7:a3:a1:39:c8:da:20:e1:48:32:b2:6e:bb:
38:2e:4a:6f:c5:90:3f:ec:f2:81:7e:04:ad:fe:67:
8d:c3:18:2b:68:e9:ed:3b:c2:d7:e4:f3:a5:2f:34:
23:9d:ae:34:b0:4f:e7:46:a1:e4:e8:1f:ea:66:2a:
81:8a:ed:6f:62:03:41:86:eb:a0:bb:5b:1d:d2:35:
d1:37:be:4f:34:d1:d2:67:ed:c1:49:f6:46:2d:97:
ca:3c:8e:73:9f:e7:4b:76:b1:14:9a:f0:e0:e7:c6:
fc:85:5a:10:65:97:77:1b:99:8c:e4:d2:b5:a1:75:
53:00:69:38:5e:68:03:3d:69:fa:7e:ce:f5:23:f7:
7a:43:73:ac:e2:bf:d3:30:e8:bf:1f:7f:d0:e5:8d:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A4:20:10:39:A9:1D:58:91:70:B6:5E:5D:5B:54:1C:F1:CF:5F:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de524879-1127-3723-93aa-b832473e49e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.94.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:3e:07:84:6e:5c:62:1b:0a:2f:4a:56:06:b0:50:53:22:5f:
24:22:4a:31:a7:56:ab:14:8b:c5:85:54:ea:05:6a:9a:ca:c1:
98:a4:40:97:bd:7a:3a:92:01:3e:0b:62:22:d5:12:de:6e:88:
c8:aa:39:54:13:2f:17:99:83:c0:85:ee:4a:33:fa:46:39:23:
d6:04:e4:70:e9:57:d2:4b:95:64:ce:4c:29:b4:55:82:34:fb:
21:48:13:17:67:15:1e:af:6d:94:2c:90:3d:70:9f:d6:5c:8b:
c6:27:e9:d9:88:86:f8:a2:6c:f1:a7:ac:42:40:89:03:11:03:
5e:72:95:f2:bc:f8:f0:57:88:23:a0:5e:2e:a6:87:88:36:4e:
42:3d:4d:38:ea:af:81:de:1c:48:5e:25:4f:9b:0e:e0:8d:78:
12:58:0d:8c:52:b0:86:e6:aa:0a:9f:c2:a2:30:ca:ff:08:90:
f8:6f:80:7d:48:15:00:5b:4e:f2:ba:e3:b1:10:db:11:03:ca:
5c:ef:0e:9e:e3:d7:48:83:76:88:83:72:53:b5:fe:a4:50:9b:
25:7c:40:1f:a0:03:f3:f8:0c:8c:33:bc:8c:0b:99:ee:23:d0:
fe:3b:b0:bc:c3:cd:8a:cf:bc:03:d0:18:4e:48:6d:03:46:a0:
1b:19:b4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:00:21 2025 by rpki-client