Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc71962e-7580-3ed6-8dcc-651e50a98c6b.roa
File: dc71962e-7580-3ed6-8dcc-651e50a98c6b.roa (raw, json)
Hash identifier: lP48LjlKAESeVFsC7r3CINoEj60mHBEYOtVYLymWmiE=
Subject key identifier: B5:1C:DD:9D:83:05:01:AF:08:11:9B:75:72:FA:25:5C:D6:06:E9:D8
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F432858485C545043080DCBA0BFCF2000
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc71962e-7580-3ed6-8dcc-651e50a98c6b.roa
Signing time: Sat 28 Dec 2024 21:51:08 +0000
ROA not before: Sat 28 Dec 2024 21:51:08 +0000
ROA not after: Fri 28 Mar 2025 20:51:08 +0000
asID: 215287
IP address blocks: 96.43.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:54:50:43:08:0d:cb:a0:bf:cf:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Dec 28 21:51:08 2024 GMT
Not After : Mar 28 20:51:08 2025 GMT
Subject: CN=70e6c8af-bbf1-41c4-8959-4ad0c9b77a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:9c:29:94:10:57:3d:17:ae:48:6f:cc:86:
6c:12:7f:a3:4b:18:bd:a6:db:8d:49:37:bd:9d:52:
5a:5d:69:ae:36:5a:bf:b1:ef:78:f5:00:73:f5:18:
dc:cf:c4:eb:c2:b8:5a:b0:25:02:1c:8c:33:00:40:
02:18:07:f6:08:95:46:0d:a9:d3:57:69:ce:bb:1f:
c2:2f:d7:d0:fa:4d:c7:65:42:32:2f:19:47:a4:1d:
1a:14:5f:82:71:16:b5:2e:3d:22:3a:49:be:77:2a:
58:51:79:74:be:e5:e2:22:12:c9:a3:43:80:05:f4:
81:d4:7d:bc:40:78:06:eb:f0:93:35:8d:e6:f3:53:
9f:ad:82:1f:26:1e:15:ac:d7:87:94:d1:73:91:04:
7d:ef:d3:c4:61:9f:2b:67:17:3c:ac:1f:02:8e:ed:
39:2c:44:e3:e5:4d:9d:f7:47:b3:a0:1a:42:92:b8:
cc:cf:db:4d:6a:fd:4f:67:48:e4:25:66:97:62:f2:
9f:9c:8a:c6:54:2f:0f:61:b1:0a:db:6f:be:d2:17:
67:8e:a8:7d:1f:40:17:6b:c8:37:9b:78:62:56:f2:
a9:13:61:8f:c2:6b:9c:cd:e3:00:93:5c:fa:d5:ba:
4f:86:9b:90:28:72:d4:74:2d:4f:10:f2:55:01:7c:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1C:DD:9D:83:05:01:AF:08:11:9B:75:72:FA:25:5C:D6:06:E9:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc71962e-7580-3ed6-8dcc-651e50a98c6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
96.43.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:03:91:12:a1:4e:70:4e:9d:bc:05:89:39:34:63:3a:f0:4b:
09:56:fd:d6:1b:80:22:aa:25:8c:e6:76:88:85:35:a4:8d:b4:
b3:c7:8a:8d:f9:cb:97:b0:21:f3:32:de:b6:11:b5:7b:c3:02:
ac:fa:74:92:71:02:95:61:3a:de:cb:3c:d3:fa:ba:3c:77:f4:
01:04:dd:c0:62:ae:d3:01:0a:16:21:e1:9e:4d:62:71:46:87:
3e:c4:8f:08:a3:f6:d7:e1:9e:7e:39:70:88:17:32:80:2d:ab:
ee:75:31:77:26:69:5f:e5:10:d7:c6:b5:ad:32:d4:35:2d:29:
e7:2c:38:2f:12:80:67:e7:9b:51:eb:de:d4:87:b4:48:8c:d8:
02:fd:f6:a6:28:11:69:ca:c1:53:c6:ae:57:b0:f8:bd:0a:8e:
f1:c9:55:4f:b1:bc:af:dc:28:25:1a:9b:2f:46:63:8f:37:cd:
50:2b:c8:38:71:37:22:0a:06:ca:4f:e0:e7:23:3e:bb:0e:35:
00:e9:ad:fa:e8:f5:f8:53:bd:49:e5:71:41:05:71:7a:34:34:
1e:a6:52:51:e5:0c:af:d4:ef:18:db:94:3b:3e:09:b9:d0:d2:
a0:7a:bb:e4:85:fe:bc:0c:44:bd:cc:8d:cf:f4:b4:56:ef:d5:
d1:1d:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:13 2025 by rpki-client