Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa
File: 4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa (raw, json)
Hash identifier: JFaWan+aWiKGBEsSHzoCMpiaiTX9Ru7OxupJ05uLR94=
Subject key identifier: F9:24:15:15:68:2A:47:4F:5B:4C:3D:41:68:C5:C8:1F:AD:F6:93:5A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584902EC21A9CE9113A8D05FB3C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 16625
IP address blocks: 96.7.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:21:a9:ce:91:13:a8:d0:5f:b3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=19d68eda-92d0-47e1-ba5e-bf15fc0366c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:88:f0:5d:bb:d8:f7:37:36:b3:b8:04:4e:55:
34:89:1e:51:8a:e1:dc:26:53:6f:b2:c0:d7:9d:66:
d4:75:d2:fb:e6:8c:e2:11:d2:e0:bb:09:f6:b9:0d:
7c:72:ab:40:4b:0e:b0:3d:52:88:81:c1:14:82:8d:
66:e5:d2:21:49:ee:51:74:32:60:8d:c8:c1:bf:6c:
18:ce:1d:46:df:49:0b:86:cb:4c:1a:3b:f4:97:dd:
8b:b7:63:0a:29:ed:aa:7f:18:ae:f1:98:e9:b4:70:
7b:c3:74:04:bf:c3:d1:c5:82:08:fb:3a:fe:9e:f9:
72:71:08:62:9e:f6:eb:36:1c:e8:c3:b3:6e:bf:4c:
ec:9d:93:b0:c2:4f:c4:5f:33:d3:88:da:47:e3:04:
da:61:74:3c:aa:09:e6:94:26:bd:b0:87:43:eb:3a:
e1:1e:06:ef:f0:f1:d9:ee:95:12:39:4d:4f:14:50:
7f:0f:b7:29:02:81:cc:71:d6:98:c7:be:fd:fe:0e:
56:33:0a:83:d5:c8:df:b0:a6:b5:69:6b:2a:0f:9a:
e7:6b:f8:3e:de:da:50:41:a8:a2:a5:bd:61:1a:6d:
fd:df:42:36:d4:11:ac:dd:c4:b3:b4:f5:85:cd:be:
f4:4f:88:49:6e:67:76:bd:b7:97:57:d8:b2:68:bf:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:24:15:15:68:2A:47:4F:5B:4C:3D:41:68:C5:C8:1F:AD:F6:93:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.7.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:23:63:13:32:d1:cc:03:52:47:f3:95:2d:af:7f:81:5b:84:
c0:8c:de:7e:18:41:4d:bd:52:ab:ba:7e:6c:cb:3f:b0:cb:b0:
0b:51:21:f3:00:00:ef:bd:ec:c2:0f:6b:bc:d6:ce:e4:8b:e6:
aa:b3:9f:22:ea:58:36:b6:a2:a1:f7:5d:26:ba:0c:ce:5c:5b:
be:11:8b:29:37:05:6a:e9:83:08:59:e9:ed:e4:ea:08:b8:5d:
43:20:98:69:80:5f:1d:9a:9f:34:e1:fe:9f:73:b4:e2:88:f7:
b0:e0:30:45:1a:d9:e7:50:69:a2:c8:1e:99:64:ac:e4:82:f2:
70:71:5e:97:8e:8f:30:58:b2:7f:49:d7:63:9a:4a:60:12:37:
03:61:d7:93:75:92:c8:77:d5:d3:9c:29:95:00:55:0c:33:72:
8b:e2:9c:9c:85:e8:04:b6:31:e2:90:10:a1:a7:a0:c4:27:78:
b4:66:3e:2d:2b:52:e5:6c:5f:1e:9e:8b:82:dd:c8:55:56:bd:
5c:d6:de:e9:a5:ff:4d:34:0b:75:af:4d:42:4c:23:0b:e6:49:
36:cd:72:30:d1:cc:3a:6b:a7:8d:6f:88:4a:39:8d:2e:6d:98:
e9:d8:91:e7:c9:f9:24:3e:8d:d2:a4:9f:10:58:9f:58:98:11:
8f:36:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:39 2025 by rpki-client