Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/d12a4c75-b429-30dd-b69a-b38ea72126c0.roa
File: d12a4c75-b429-30dd-b69a-b38ea72126c0.roa (raw, json)
Hash identifier: 9A+5m+jtZ0s7gTphx4XZQB8cnJUGAnYjcB9Qofoiw40=
Subject key identifier: 0E:A3:83:D9:52:DD:E1:34:74:F8:57:B6:D4:3E:2B:92:31:32:D1:32
Certificate issuer: /CN=2e689c55-8453-486f-8b88-f433fba67f55
Certificate serial: 010D0C9F432858488815E9995FB0085216882080
Authority key identifier: CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/d12a4c75-b429-30dd-b69a-b38ea72126c0.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 26216
IP address blocks: 172.96.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e9:99:5f:b0:08:52:16:88:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e689c55-8453-486f-8b88-f433fba67f55
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=5c538be4-5541-4b6c-996e-195ba3e5516d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e8:13:64:04:7e:d6:83:62:08:73:7d:49:94:
87:e5:c2:2c:49:1f:9d:b7:9f:e5:e4:c6:8e:26:96:
13:d5:e5:46:46:45:fe:12:b6:19:39:1f:3a:92:db:
9b:e5:ec:79:3d:16:1c:17:a4:5f:f2:7d:b8:9c:3e:
59:6a:5a:9c:d1:03:81:7a:71:35:34:01:ef:3c:7e:
92:29:86:ce:b4:50:d8:da:9a:89:84:2e:97:c4:ea:
80:02:f4:ac:42:c7:b2:e2:79:30:04:2e:ed:f0:f8:
5c:97:fa:7c:71:03:92:a9:6c:db:56:d7:cc:27:26:
72:c2:3e:f1:06:c7:ce:88:d7:76:b0:d4:f5:e7:40:
6b:90:18:39:fe:91:87:52:0b:69:45:36:0a:c0:73:
9f:6d:a8:3d:f4:9e:4b:6e:56:dc:24:b1:81:bb:ea:
6a:0a:fc:35:39:30:c4:d7:8a:fe:9b:f6:55:f8:b4:
65:27:b6:b1:bb:74:6a:04:5f:a4:92:ca:f9:95:7b:
5d:ec:5d:e8:52:a6:d0:61:32:36:ed:e1:22:e8:9b:
48:9f:25:a7:34:bd:5d:9f:fd:8b:91:f9:85:fa:59:
9f:b6:66:94:f5:b6:6e:2a:09:d8:e5:a8:e3:08:04:
43:c8:fe:a2:d1:a8:93:85:07:4e:fd:ea:b1:ba:b8:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A3:83:D9:52:DD:E1:34:74:F8:57:B6:D4:3E:2B:92:31:32:D1:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/d12a4c75-b429-30dd-b69a-b38ea72126c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.crl
X509v3 Authority Key Identifier:
keyid:CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:62:ea:5d:c5:e7:78:2b:00:c6:0c:e5:42:0f:2b:3f:57:f7:
2c:f1:c4:19:76:a2:0a:42:af:48:09:89:58:85:e8:7a:c3:5c:
50:52:ff:d2:9d:49:a9:13:48:76:b9:d5:92:64:49:ff:0c:54:
91:40:68:d6:fb:0c:e8:64:4e:92:cc:cc:4d:36:2e:f3:6e:d6:
0b:4d:f6:18:e8:12:ba:b8:9e:0f:02:25:3e:f6:b3:47:15:77:
60:c6:65:80:2f:52:0d:9e:9d:6c:dd:74:29:d3:a1:cc:2b:ea:
af:42:f1:0e:f8:81:e1:91:78:c8:d3:fc:44:15:6b:62:45:41:
50:19:f7:1a:fb:2b:03:72:ab:28:fb:99:43:ea:a5:2d:b6:d2:
0f:29:3e:40:82:0a:eb:7c:7c:3b:5a:91:36:32:b1:3f:d8:ed:
58:4e:61:de:6d:ab:32:87:80:94:d4:af:5c:99:e0:42:19:77:
f4:1d:00:8a:5e:d4:99:56:4d:a2:8e:43:99:4a:6f:0a:ad:2b:
0c:ba:5d:a0:07:46:c3:b6:00:c0:57:c7:8d:49:7c:99:0d:ab:
0a:e7:85:cb:f0:20:95:08:e4:a5:80:2d:c8:5b:ca:bb:8d:e6:
d5:9c:4b:b2:3d:80:5b:b1:3b:84:01:62:d1:6b:76:8c:27:c7:
db:79:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:09 2025 by rpki-client