Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ddfd834b-6699-3504-990d-60db84c8c2f2.roa
File: ddfd834b-6699-3504-990d-60db84c8c2f2.roa (raw, json)
Hash identifier: WjWqj16x26Pi1dmw9bhKGnmLF8W8xig7obNjhLwUneM=
Subject key identifier: 29:9F:95:A6:35:B7:3C:29:5E:F1:07:FE:B3:C8:EC:DD:A8:D4:E2:EA
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F43285848A4AAA4C0732F8E053842BC80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ddfd834b-6699-3504-990d-60db84c8c2f2.roa
Signing time: Thu 23 Jan 2025 19:43:17 +0000
ROA not before: Thu 23 Jan 2025 19:43:17 +0000
ROA not after: Wed 23 Apr 2025 18:43:17 +0000
asID: 23473
IP address blocks: 96.63.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:aa:a4:c0:73:2f:8e:05:38:42:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Jan 23 19:43:17 2025 GMT
Not After : Apr 23 18:43:17 2025 GMT
Subject: CN=23b949af-1415-4784-a72d-767d0bd71988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:be:48:f7:d5:ba:d6:57:97:c4:67:b5:d9:23:
7c:0c:d5:a2:2f:99:cc:9f:52:0a:36:d0:f1:73:3a:
6a:22:f8:97:68:39:e9:0f:f2:0a:98:7b:07:c3:3e:
22:e7:0b:08:91:2a:29:62:7e:30:5e:a3:51:e7:b3:
c5:d1:b0:9a:af:bd:f2:bc:75:fb:08:44:9a:57:43:
f8:77:0c:a0:69:18:4a:f5:02:bb:32:da:8a:3d:32:
fa:3e:6d:ff:12:78:bf:47:88:78:be:ec:85:4a:6b:
67:35:99:be:b8:07:ab:c1:92:42:07:a7:1b:10:3d:
85:c0:97:fb:ab:bd:5e:24:b1:74:f1:c1:58:35:ca:
ad:f8:64:8c:0e:62:02:b8:3b:0d:52:8e:fb:4b:04:
97:de:1d:a4:b7:95:0e:a9:ff:1a:92:1a:56:02:31:
5f:4c:58:74:ac:19:28:a8:2d:c5:df:d2:d8:27:99:
fb:7c:6f:a6:47:9e:1c:4c:59:4c:cb:1c:a9:4b:d3:
28:b5:2c:0c:4c:63:66:b6:45:a3:90:2d:0d:62:e3:
11:44:f3:1c:2e:a4:90:dd:7e:5f:a1:51:84:ce:4e:
b7:ba:c6:d0:1b:7c:8c:4c:80:dc:64:34:41:a5:e4:
69:26:b7:8d:d8:de:cd:2b:9f:66:f6:a1:51:66:31:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9F:95:A6:35:B7:3C:29:5E:F1:07:FE:B3:C8:EC:DD:A8:D4:E2:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ddfd834b-6699-3504-990d-60db84c8c2f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
96.63.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:7c:fc:d5:77:67:10:49:ba:5c:ce:bb:dc:c1:0b:c7:6e:73:
c7:1c:22:e9:e2:76:04:05:fa:8d:50:bc:3d:b7:0f:63:5e:25:
0c:99:13:81:d2:85:4f:9b:79:ae:85:37:55:14:83:7a:a2:10:
8d:c7:c2:5d:64:ba:c0:6a:33:c8:a1:a9:e7:74:1f:ba:e7:c1:
db:9d:a3:d7:06:0e:29:cd:eb:36:20:7e:28:03:27:e6:ff:86:
75:c1:0c:02:61:f8:af:93:4a:83:42:43:40:3b:79:7c:cb:d4:
3b:79:51:8f:66:66:8b:6f:6c:a4:bb:60:27:75:09:ea:e0:2a:
68:2e:94:30:b8:47:34:97:49:52:fb:82:59:d7:22:97:44:1c:
ef:60:7c:c7:46:ea:5e:f2:e9:a9:e0:d8:4c:cd:b7:3b:6b:86:
88:b5:78:7f:44:20:93:9d:bb:9d:21:ab:f4:a3:7d:6e:89:d4:
d7:28:ea:4b:31:e9:61:2f:5b:dc:51:27:79:b0:6e:e0:2a:6f:
81:dd:36:0c:4b:04:45:a5:40:0c:0b:4a:f5:8b:86:bf:da:4d:
9a:88:c6:41:8f:43:52:8d:c2:52:c4:69:ea:2d:17:cd:fc:b0:
50:41:41:df:dc:7b:28:a3:b1:3d:de:1e:8c:0f:d5:34:98:41:
14:31:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:15 2025 by rpki-client