Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/672c6b10-927a-3073-80f3-5e38ac0a75d7.roa
File: 672c6b10-927a-3073-80f3-5e38ac0a75d7.roa (raw, json)
Hash identifier: gGJ80QcQ9tO5UPgIN7W8sWLiH77AVkGUorlQCnJdwKk=
Subject key identifier: 61:00:BF:F9:DC:13:1A:5A:82:6F:EE:5E:5D:13:BC:F8:B5:DB:44:11
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584902EC20803590C805F8C0C5C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/672c6b10-927a-3073-80f3-5e38ac0a75d7.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 16625
IP address blocks: 96.7.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:20:80:35:90:c8:05:f8:c0:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=fdd4e32f-2503-443f-9054-642ef17a3976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:4b:78:52:04:16:17:6d:39:4c:92:e6:04:
34:ff:39:46:2c:75:63:f0:55:e9:b6:a9:69:73:1b:
35:03:59:ac:1e:06:5c:30:05:2b:c2:b7:e8:70:5b:
2a:f9:e1:78:13:cb:97:c7:d0:01:9c:ee:e3:33:d9:
30:29:48:e5:a4:82:80:3a:66:b9:c7:31:ea:ad:9e:
3f:59:bf:03:c4:0b:2f:a1:33:e5:d3:77:2e:61:ee:
e1:85:21:a3:24:4a:70:ae:3e:45:a9:41:34:5c:8d:
bb:e9:95:a2:88:79:eb:26:62:34:01:f5:ee:5f:a9:
9a:41:44:3e:a7:00:f7:89:97:49:3c:72:cf:d3:77:
27:56:c8:17:c2:9c:94:b3:27:dc:c3:34:32:42:93:
7f:97:00:c2:f6:23:f3:f3:80:11:52:7e:bf:d7:f4:
ca:1e:a9:41:47:c8:b1:be:c7:ca:a6:4d:38:20:e9:
78:b0:7f:64:77:66:6f:a9:b2:d4:4a:62:86:45:e1:
46:4d:2a:a9:19:ca:d6:0c:80:51:9c:fa:41:4a:77:
60:8d:a3:24:4a:74:63:80:9f:86:69:6d:43:2b:57:
f0:ca:10:95:c5:a9:39:8a:21:8b:5b:3e:d6:1a:4f:
b4:aa:db:15:7d:fe:74:08:f9:9c:99:47:ef:59:6c:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:00:BF:F9:DC:13:1A:5A:82:6F:EE:5E:5D:13:BC:F8:B5:DB:44:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/672c6b10-927a-3073-80f3-5e38ac0a75d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.7.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:f2:4c:17:86:ea:1f:de:40:50:fb:68:79:a1:a1:29:5c:84:
74:b8:b5:79:44:d6:c9:2c:d8:1b:68:9d:14:af:96:4d:1b:05:
f1:2d:69:7a:86:f6:f9:dc:94:f7:a9:25:67:3a:b4:df:c4:27:
af:86:ed:4b:5d:6e:f0:be:19:4e:90:d8:82:af:75:b0:1a:91:
9b:e9:81:74:f8:b3:bf:19:63:88:a6:52:c2:3b:2f:58:d7:a7:
96:90:06:38:0e:fc:9a:d9:8e:39:5c:78:52:f8:1f:85:9e:2b:
75:72:08:35:39:2b:02:d2:fd:83:9e:45:20:9f:2d:45:62:87:
57:c3:bc:14:de:27:9e:af:09:54:9a:5c:03:1a:00:9c:79:4d:
40:8b:16:02:30:ef:e5:d2:72:df:50:fe:b4:dd:39:96:ba:ac:
31:52:e3:4c:23:31:c8:32:a4:ab:15:56:ef:f6:91:6c:4e:01:
b2:cd:c2:1d:93:b0:af:40:9b:46:f8:91:b8:4a:b4:00:cb:51:
dc:b9:5b:f1:89:c6:1a:43:4b:16:12:11:8d:26:95:c7:02:e9:
ed:50:f7:19:5d:3c:b4:e6:bc:59:3b:ab:5b:cf:67:ef:20:6c:
d9:f8:2f:ca:a1:b3:db:27:06:e6:b3:5f:f1:a1:fd:53:d2:6d:
09:d6:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:42 2025 by rpki-client