Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68aeb51c-a993-39b0-b8a0-f9d56bbdf8e3.roa
File: 68aeb51c-a993-39b0-b8a0-f9d56bbdf8e3.roa (raw, json)
Hash identifier: CuyOnnjBHE3hEbz7S+FVg7m705PDKeFyAT6vawn/co0=
Subject key identifier: 0F:41:FC:8F:B0:C3:F0:9E:4A:EC:9E:F1:B6:A3:5F:EC:78:F6:7E:4D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858490B4C3872F6F315CA3C50BF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68aeb51c-a993-39b0-b8a0-f9d56bbdf8e3.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 16625
IP address blocks: 96.16.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:38:72:f6:f3:15:ca:3c:50:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=129cb01b-88af-4b19-a922-e27f452ad8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:6f:61:ae:f8:b0:ee:8b:d2:6a:30:83:d1:
99:10:48:0e:0b:00:fe:d4:da:9b:21:66:9a:9a:4c:
2c:d9:bd:be:b0:68:a5:2f:d1:16:bd:4e:25:54:0d:
21:aa:0c:28:f0:a2:4e:43:50:ac:41:0d:26:4b:df:
0d:56:8b:bf:0a:e0:fa:06:50:73:78:59:b4:6c:7e:
c0:22:a3:83:c8:15:a9:ac:af:50:38:3e:45:07:db:
b9:00:fd:88:ce:f5:45:2a:38:d1:ea:26:2d:75:f6:
91:4e:6b:a0:0a:e2:9a:b2:78:aa:e1:b8:f7:2c:12:
f8:72:dc:42:e6:1e:f9:36:82:69:de:e7:85:44:07:
f7:b0:2f:5d:05:56:24:39:0d:db:fc:98:0a:e8:e1:
e1:a4:7c:4f:7e:ce:ec:f3:80:d6:58:4e:4e:e1:e0:
fc:cd:6d:b1:53:eb:25:8b:38:0f:44:ce:bd:1b:5e:
dd:87:4e:63:dc:eb:c1:f5:ff:ae:82:a6:8f:e2:8e:
b9:a5:99:d5:13:21:26:21:6f:c3:e3:ff:a9:a3:c7:
1f:40:7a:8b:af:a4:ce:16:3d:c8:48:cf:0e:c7:f3:
cc:4d:43:93:6a:1f:3a:31:bd:94:2d:0b:50:b5:81:
09:4a:d0:7b:0a:d0:af:d7:4b:66:8f:b8:16:b3:de:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:41:FC:8F:B0:C3:F0:9E:4A:EC:9E:F1:B6:A3:5F:EC:78:F6:7E:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68aeb51c-a993-39b0-b8a0-f9d56bbdf8e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.16.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:5b:ab:b4:92:e4:ba:f2:50:5c:ca:7c:37:5d:ef:e2:7e:f5:
7d:dc:e8:52:eb:58:59:89:3c:3b:39:39:7d:32:7e:a6:ad:a1:
d9:5e:72:01:2c:e3:f2:e9:d5:a5:67:00:4f:82:6f:6c:72:73:
7d:d3:2c:fa:dc:65:4f:c5:fa:80:09:4c:e3:87:4d:4d:10:7c:
73:f5:9f:64:60:97:33:af:5a:2a:bb:af:4b:77:3d:d9:78:da:
20:30:56:70:2f:0a:c9:36:a6:1d:1a:3c:f7:aa:39:d1:0d:29:
fe:f3:c4:d7:a1:c7:ca:65:4b:76:0f:7b:60:a2:e9:a5:59:28:
66:ab:a2:0d:bd:3d:1f:ed:8a:e0:c6:ba:c8:97:7b:0c:2f:6c:
c0:79:0b:cc:d9:94:b9:36:47:72:c6:79:b5:28:92:ca:96:1c:
5a:ef:81:7a:97:5c:b3:c8:a7:c0:66:f5:2f:7b:0c:c8:e0:f2:
bc:36:fb:2e:02:40:68:cb:33:09:0e:ab:84:f6:74:57:aa:fb:
ca:b6:8b:74:5f:53:b6:ac:ad:99:83:16:5a:16:86:2d:10:23:
53:82:2d:2d:4f:3a:23:3c:30:a9:db:24:70:83:5c:cd:70:c9:
c4:f5:97:f0:6c:16:0b:11:fa:30:55:7a:eb:a2:31:82:66:0f:
71:d5:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:24 2025 by rpki-client