Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa
File: ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa (raw, json)
Hash identifier: KbouxWYjqcfu0stE6Hv+/uetv2+Ta96MjKQsrriyHsw=
Subject key identifier: A7:6A:4E:D4:D5:FB:AF:64:1B:BE:21:AE:97:95:F1:BC:D5:27:12:D5
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F43285849203C11A8129755E35B17DD00
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 834
IP address blocks: 96.43.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:11:a8:12:97:55:e3:5b:17:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=f62c9dcb-cc47-4bc3-abb0-97e90815d090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:af:8a:6f:17:a1:30:72:a1:1d:ef:4d:35:c3:
55:6a:ad:4f:1c:1b:24:ee:06:18:75:d9:8d:e6:80:
c7:e3:85:1e:89:f5:ab:c0:98:8f:6e:bf:8f:dd:85:
d9:7d:32:e2:60:8d:b7:91:9b:2f:f6:a2:f1:3c:f2:
7e:fe:7c:6b:c4:cd:4c:9d:3c:cf:dd:79:77:5d:8c:
85:7e:0d:2e:25:45:5c:2f:1b:69:81:19:52:28:db:
4d:21:74:8c:e5:38:ea:31:06:4b:a3:28:42:2a:0d:
24:ae:09:62:53:fd:b9:1a:c2:d4:5b:bb:ce:ef:21:
b9:a4:d4:64:9e:80:3c:da:5a:c7:fd:c6:cb:31:31:
9e:58:6e:ed:cf:35:39:86:0e:98:be:bc:14:32:93:
b8:06:9e:4f:ff:69:61:a1:56:6d:63:34:69:cd:1f:
f7:ca:6c:60:eb:4e:9c:e4:99:92:5f:a7:59:9a:bc:
fe:0b:33:18:3a:7f:83:39:2d:8c:d5:73:29:0a:54:
70:22:01:e1:36:04:09:4b:53:00:6a:ae:08:29:ab:
9a:16:83:4e:b8:2f:8d:22:75:d8:9e:75:16:2b:8c:
46:b9:16:42:0c:fc:92:95:ff:b4:af:c3:74:aa:d2:
2d:d5:96:d0:5b:ff:0d:be:b6:6c:14:9d:9d:a9:0e:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6A:4E:D4:D5:FB:AF:64:1B:BE:21:AE:97:95:F1:BC:D5:27:12:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
96.43.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:20:59:85:76:d7:dd:c0:f1:0e:b7:f2:d9:84:c7:08:93:dd:
38:f7:0c:5c:99:da:75:4d:ec:37:35:4c:81:73:3d:36:48:6b:
87:9a:fd:85:64:20:af:c3:3d:c3:f9:d2:a0:2e:53:67:25:b7:
b3:00:5b:a6:00:c5:a0:c3:b9:5a:be:f4:55:7a:6c:17:1c:72:
e6:7e:dc:ff:f4:35:5b:16:9f:e6:49:b1:74:10:db:ce:a4:bf:
69:da:7c:c1:4c:e8:5e:22:61:55:45:a7:c2:d0:20:ad:dd:74:
7c:16:4c:6b:eb:3b:87:c1:64:be:d5:f5:04:6b:bf:ff:df:ee:
89:c3:78:9d:b5:73:11:1c:a7:ac:27:fa:f7:b4:8a:2f:35:e7:
de:53:6c:71:61:92:f8:98:47:38:31:24:93:f2:32:05:3a:a5:
07:00:1a:bc:04:69:13:8a:65:11:ec:2e:c6:ae:e0:5b:db:4e:
b4:84:c7:bf:8b:f5:2c:4b:ba:00:43:7d:59:8d:cd:5c:39:fc:
a9:13:f5:38:d9:3f:58:90:08:d7:65:8c:fd:9a:e7:9b:3d:05:
dc:f1:b3:70:95:20:1c:de:15:72:58:96:90:54:81:33:20:1a:
12:e5:0d:f4:af:79:80:20:06:17:9a:3f:1c:ea:28:78:cb:c3:
41:d4:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:15 2025 by rpki-client