Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8af2fb46-8563-309f-9125-ce5d7bfd1527.roa
File: 8af2fb46-8563-309f-9125-ce5d7bfd1527.roa (raw, json)
Hash identifier: +pvifcxMuhiMC4qNvjqvLUyXiMXiajqKSxilPRorHD4=
Subject key identifier: A3:EF:D3:D1:DD:43:D7:05:08:3E:B7:AB:E8:50:27:94:3C:5D:BE:24
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB7B41250BE90435037748
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8af2fb46-8563-309f-9125-ce5d7bfd1527.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 96.1.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:7b:41:25:0b:e9:04:35:03:77:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=88d37c69-93d8-4de7-819c-3021391035e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:ab:b7:e8:d3:9b:fc:30:8b:1f:53:14:47:
53:85:41:ad:ba:4c:b4:bf:0a:82:03:19:66:4a:94:
5a:ac:0f:f5:b2:12:7e:13:76:99:00:06:bd:a6:5b:
42:0f:95:27:79:c3:f5:2f:49:d1:6c:44:9b:a6:95:
3f:8e:58:62:23:0c:7a:c0:1a:db:b4:4c:d9:65:42:
6d:15:70:32:cb:b7:6a:40:99:b9:c6:c9:94:5a:30:
46:d5:7b:15:ec:8a:de:69:65:0b:f8:a1:f6:4d:5a:
ab:9b:3d:9c:0b:ab:01:e0:02:c2:9e:35:37:1f:1f:
e6:4f:c3:75:da:f5:ad:d5:fe:47:0f:b6:35:11:8f:
fc:60:30:51:be:6e:6c:3c:ff:32:0e:4e:b1:43:a7:
09:1c:a1:14:92:bb:33:9e:3e:c7:7a:45:30:6c:99:
c8:02:03:e3:2f:2a:73:14:89:27:bb:4c:16:0d:3a:
68:82:cd:1b:d3:5a:97:cb:d3:7d:68:1d:a2:44:12:
bd:bb:85:5c:5f:ff:fd:04:94:1b:bc:67:29:3b:08:
26:b6:9b:42:3e:1c:11:e1:c3:a7:2c:64:93:03:9f:
7c:e3:2f:93:52:db:08:f0:83:3a:9a:26:65:2b:6b:
4a:a5:20:06:fe:2a:7a:a0:06:05:38:df:4c:5e:ff:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EF:D3:D1:DD:43:D7:05:08:3E:B7:AB:E8:50:27:94:3C:5D:BE:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8af2fb46-8563-309f-9125-ce5d7bfd1527.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
96.1.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:55:46:a4:ef:07:e6:52:fa:97:01:7e:c8:6d:a8:20:22:26:
ff:1f:47:af:bc:60:d4:0d:5b:dd:4f:91:b3:f7:4a:51:66:20:
94:fe:cb:e1:8b:cb:51:b6:eb:d3:a8:e5:bd:10:93:84:f1:2f:
b6:f8:65:0b:10:ea:11:fa:a3:06:b9:58:f0:8d:10:64:ca:85:
d4:ca:61:81:dd:12:09:f9:96:89:65:85:fc:bb:96:a0:74:b0:
6c:e7:5b:0f:6d:71:4d:00:6f:0a:65:6e:34:1f:84:f2:67:3b:
0f:21:0e:a9:97:39:44:e2:fc:1d:b4:fb:66:0c:bf:ba:0d:89:
5a:9d:c7:38:6a:00:95:d7:6d:ce:a1:3c:7f:63:26:0c:b0:92:
bb:4b:41:b1:1b:5e:20:37:6c:54:4a:40:7c:b4:b2:10:82:23:
4a:4a:27:8f:83:45:70:32:e8:e0:73:1e:2e:cc:65:fd:1d:ff:
0b:de:c3:bc:0e:6c:7e:0a:29:36:27:db:95:55:6a:e2:af:e0:
5f:65:c7:8e:fd:9b:3d:ab:73:d9:23:93:81:aa:fe:4a:32:e7:
ff:06:de:a1:68:67:ab:43:7d:fa:22:16:51:bf:74:63:f3:af:
56:76:37:ed:d9:56:d8:cf:b6:2d:22:f6:d5:c0:48:47:25:77:
ce:ef:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:59:12 2025 by rpki-client