Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa
File: 2d9d3321-db9f-306c-9228-ae06be4dece8.roa (raw, json)
Hash identifier: 9efytsb3i0+z7T2kxk/yKOvdhBBJwW7fc6VMvYWvK+A=
Subject key identifier: 02:5D:36:31:6C:52:3B:EA:75:C8:AE:8B:B5:26:05:1E:DD:1C:A7:B8
Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial: 010D0C9F432858489A3B4A0AA8F1D551904258EC
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396982
IP address blocks: 199.47.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4a:0a:a8:f1:d5:51:90:42:58:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=3d2fc9b4-0031-461d-850a-0997aa429af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8c:6a:c2:ce:97:d0:07:28:aa:61:48:4a:40:
37:c6:a7:61:c8:52:ab:7c:e5:77:e5:4c:a7:e2:c3:
8d:3b:42:2d:fc:ab:e5:28:85:68:bc:69:e3:0e:fd:
4a:68:9f:f8:07:34:77:95:91:1d:1a:cc:6c:45:6f:
4e:8d:dc:fe:e4:0f:c4:8c:18:dd:7d:93:dc:00:54:
1c:e3:b5:c5:48:2e:fd:2b:53:c0:55:56:08:59:8f:
5b:64:2a:43:4b:73:b5:09:41:c0:17:d9:43:a1:1e:
71:f9:04:44:93:f4:43:f4:ff:d0:1c:31:c3:7b:41:
4f:36:32:f6:fc:c1:a5:c7:64:d4:c2:24:b4:cd:a3:
ea:47:e7:a3:9b:76:e1:31:56:36:fe:27:86:73:e2:
a0:15:4d:2c:75:74:28:f2:dd:12:db:ef:02:ac:e8:
0b:f8:83:26:0c:ea:69:63:73:67:9f:c3:c5:2e:da:
b8:89:6d:1e:e8:51:31:66:ca:c7:04:2f:c6:19:e5:
e1:57:c8:a3:50:73:89:68:db:bf:3a:6e:c8:f6:31:
04:c2:3f:0b:4e:3d:c3:66:1d:af:0b:bd:d8:e0:7d:
b2:f9:4d:25:02:41:45:4b:b2:76:c7:42:57:ec:34:
4a:31:ad:06:22:61:2e:bc:60:09:e5:2b:20:b3:a2:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:36:31:6C:52:3B:EA:75:C8:AE:8B:B5:26:05:1E:DD:1C:A7:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
X509v3 Authority Key Identifier:
keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.47.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:f8:70:dd:66:f0:96:9b:3a:29:62:28:f7:ee:45:37:4f:29:
6e:34:5d:87:cb:75:77:77:39:fa:6b:5f:fc:5b:a4:0f:3f:ab:
84:50:83:b9:e2:d2:45:23:26:64:d9:72:52:e7:5b:f3:09:a6:
71:90:72:d3:52:48:79:85:64:47:e6:a1:b9:b4:d9:53:d7:91:
f2:93:0c:4b:2c:f6:a1:ca:36:a4:61:55:c1:5b:ae:a9:1a:e5:
d5:2c:16:28:d5:d6:e7:9b:61:93:28:64:32:30:b9:40:99:0a:
d3:82:e4:e9:7b:f8:61:a1:49:67:70:46:99:1b:64:a8:11:f5:
69:2c:d9:74:b3:8b:8a:b7:6f:5f:0c:55:ea:03:25:39:60:e5:
86:02:37:9b:f5:fb:34:47:d8:cd:11:83:74:11:30:de:8b:ef:
e2:79:1c:06:aa:75:9b:1e:56:e3:c6:87:f8:77:47:65:ad:ce:
86:4c:dc:34:e7:2f:08:ff:f5:1a:68:eb:db:1a:4a:27:88:b9:
78:5d:b4:42:30:1c:ef:b1:f9:0a:d7:b4:4d:5b:fe:aa:46:71:
9f:22:e8:52:3d:cb:ea:6c:f5:b5:79:66:74:15:52:98:c8:33:
4a:cb:ac:1e:25:1d:40:46:10:78:a2:da:0e:77:29:21:cc:b6:
69:57:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:44:37 2025 by rpki-client