Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/8a5254b9-7785-3294-8fe6-7375cb59fa6e.roa
File: 8a5254b9-7785-3294-8fe6-7375cb59fa6e.roa (raw, json)
Hash identifier: MgnXVvcdrqLf2UJt+P2Zet/ShhxpVajXsUDJAyJVgEo=
Subject key identifier: E3:CC:27:41:03:69:A6:B5:EE:07:4C:0C:74:B8:EC:EB:84:63:EC:C5
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F43285848DE16A2BC6D87FF5A6B805B88
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/8a5254b9-7785-3294-8fe6-7375cb59fa6e.roa
Signing time: Thu 13 Feb 2025 09:21:57 +0000
ROA not before: Thu 13 Feb 2025 09:21:57 +0000
ROA not after: Wed 14 May 2025 08:21:57 +0000
asID: 14315
IP address blocks: 96.43.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:16:a2:bc:6d:87:ff:5a:6b:80:5b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Feb 13 09:21:57 2025 GMT
Not After : May 14 08:21:57 2025 GMT
Subject: CN=cddfdb05-a793-446d-95ff-7c576df15133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:09:8c:6f:fb:0e:fc:08:4f:cd:d5:7e:b9:87:
68:d5:bf:82:3b:da:1b:5a:a0:03:e0:1d:6f:5c:d6:
fb:f7:aa:91:93:aa:69:b8:87:cd:72:39:af:a6:9d:
42:77:96:2c:f7:e5:22:c7:fe:74:dd:a1:c5:4e:39:
76:9c:84:b7:5a:00:a1:8a:21:6b:32:30:cd:d1:d0:
4e:88:24:f6:1d:06:c3:3e:3f:32:f8:ae:ea:d6:d0:
22:00:7f:cd:ca:71:36:44:47:23:ed:5e:b5:96:0e:
8a:b1:d9:28:cd:d3:9d:22:60:86:2d:16:2f:21:e6:
48:ed:43:9b:87:b0:ca:b1:d7:f2:3c:81:80:25:ea:
4f:28:14:b7:d0:59:56:97:00:79:1a:c5:df:00:9b:
07:d2:89:fc:56:b3:7f:c0:97:60:93:56:c7:f4:4a:
7f:48:bb:04:f5:09:b1:d4:b8:c0:8a:e0:c1:36:22:
e9:82:63:d1:7a:1d:ab:dd:34:52:c2:8f:69:55:da:
43:5f:32:ba:cf:4c:96:61:e9:3a:d5:f4:15:24:b5:
8a:0c:45:8c:7e:09:75:26:80:5d:bd:1a:7c:95:b4:
89:e1:fa:29:73:a9:b2:c2:e7:e0:72:1a:9d:f7:66:
73:22:9b:5d:a9:64:b8:88:c3:de:5f:8e:74:b8:20:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CC:27:41:03:69:A6:B5:EE:07:4C:0C:74:B8:EC:EB:84:63:EC:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/8a5254b9-7785-3294-8fe6-7375cb59fa6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
96.43.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:fd:35:ff:a4:65:60:f2:35:cc:c1:c9:ae:44:38:95:f6:0f:
77:fc:52:48:23:81:41:27:15:c4:f6:54:46:12:d4:ec:cb:73:
76:ef:ee:c2:ae:4f:0a:2a:3b:f1:89:ee:72:b2:ce:7c:5b:7b:
c5:42:5c:e3:88:76:9c:6b:9f:05:c0:33:b8:b4:ed:ba:d0:af:
7c:98:d8:4f:8c:0c:25:83:eb:dd:bd:e1:36:04:33:ee:0f:99:
12:12:36:a9:d3:92:90:e4:be:9c:fc:d3:30:27:74:34:66:27:
83:f3:9f:63:be:37:7b:b8:93:dd:c4:d2:a9:f2:c0:14:ef:a2:
b0:3a:93:ec:4a:8f:05:db:26:30:90:af:07:a2:af:9c:25:7b:
96:bc:19:56:ba:a9:41:48:76:01:6e:a9:fa:d9:a5:98:9d:61:
04:18:e6:1e:30:e6:33:85:b1:44:33:0a:bb:1c:11:41:d6:c8:
19:e0:51:bb:f5:90:c1:76:03:da:60:d5:ac:1a:66:ca:b3:02:
f8:f9:f8:fa:29:c3:5a:9b:58:68:f8:ae:17:f7:e6:e9:6e:db:
dd:e5:72:4d:d3:b0:eb:8a:20:cd:e7:a1:a5:2f:7d:73:e0:b2:
bb:4e:9e:ae:99:2f:8e:4f:a0:18:b2:2b:3f:d4:cc:a2:16:66:
20:1c:bc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:15 2025 by rpki-client