Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/544d6004-e6b7-35fa-aaa3-9b1b837453f0.roa
File: 544d6004-e6b7-35fa-aaa3-9b1b837453f0.roa (raw, json)
Hash identifier: QzW2q7e4+MOsRDuhleTNJbix6EcdDPTB2caCdlceCRM=
Subject key identifier: C9:1E:26:A4:16:F2:E0:11:D5:BB:83:EA:FC:D0:A1:6B:E5:94:9A:D3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584902EC34A98D54368AE70C46C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/544d6004-e6b7-35fa-aaa3-9b1b837453f0.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 20940
IP address blocks: 96.17.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:34:a9:8d:54:36:8a:e7:0c:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=432ce18c-608e-4dcc-9bee-c1f577544a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:27:3c:a5:1d:6c:8d:1b:0c:51:9c:cb:b6:
2a:c4:73:95:75:5c:ed:60:38:7e:cc:a3:68:75:e8:
89:3e:76:6c:1a:1e:d8:1c:02:bb:e2:91:58:0f:d2:
38:73:72:e1:aa:96:9b:e6:6b:16:0f:08:c1:a3:f7:
c4:12:9e:8b:9c:e4:8a:f2:d8:3e:f3:35:ab:bb:4d:
30:b3:fd:19:2b:e0:9a:b1:db:df:30:70:bd:90:52:
2c:ed:21:dc:aa:55:ab:cd:bb:d4:70:2e:65:76:e8:
a2:74:99:93:4b:58:fb:d6:9e:d8:a2:35:d3:b1:4d:
88:a6:eb:2c:d5:3e:87:c1:75:78:a0:1e:ea:91:95:
b4:76:27:7b:3b:e2:22:c4:19:ae:74:1f:d5:24:49:
33:ca:b9:ac:92:25:3f:00:7c:c7:11:6e:ba:c1:73:
ad:43:3f:b6:49:9c:de:6c:ed:6c:60:dd:4b:41:56:
e6:bc:71:a6:32:48:fc:1a:53:6e:95:60:4d:50:17:
d2:c6:5e:04:30:2c:a5:d9:96:7e:19:3f:b4:92:ab:
b2:ee:dd:ae:0f:d0:91:5f:7d:dd:3e:6c:d0:42:c4:
bf:f8:d5:c3:7a:44:38:d0:9e:4d:85:1e:fd:39:0d:
49:a9:4c:7a:75:f0:c3:9a:41:44:31:62:34:e7:98:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1E:26:A4:16:F2:E0:11:D5:BB:83:EA:FC:D0:A1:6B:E5:94:9A:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/544d6004-e6b7-35fa-aaa3-9b1b837453f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.17.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:68:98:4c:9b:26:30:04:64:b6:e4:94:e9:9b:bf:3e:96:07:
47:bb:b4:24:e7:5a:4b:a8:2e:e3:49:99:b5:ef:1b:19:71:4c:
d4:d5:17:d5:9f:70:4d:e5:38:2a:a9:27:9a:91:66:19:ba:dc:
fb:3d:36:41:ab:7c:c3:32:43:a2:52:4e:fa:ef:69:72:d1:4d:
31:6d:67:d1:a9:39:bc:14:12:17:46:08:7f:35:42:f7:f4:84:
6d:91:e8:b6:bf:b5:20:95:94:72:27:53:a2:31:12:18:19:4a:
c7:2f:a1:2d:e2:77:4c:28:d6:ac:6e:30:8b:c0:32:8d:67:21:
f4:7c:56:fc:14:48:ca:ca:5d:a9:85:09:dd:8a:0b:59:42:cf:
6a:71:36:ee:7d:f4:56:b0:32:65:1e:ec:3a:a8:83:f3:90:38:
e0:86:cf:80:ae:25:ce:97:80:29:3f:9a:64:2a:1c:bc:91:7f:
ab:c0:76:3e:9d:9d:02:d0:2c:f0:05:d4:79:6a:a3:42:c3:0b:
a1:f2:a7:1d:c9:a2:ad:01:ee:f2:c2:c4:15:c8:2d:2c:ed:5e:
01:0d:a3:48:f9:37:1c:6d:91:b6:24:35:b5:c1:20:e0:1c:4a:
31:28:9f:71:af:a9:b6:14:b1:f7:ba:3a:a8:5b:a6:43:cd:76:
4e:33:4e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:16 2025 by rpki-client