Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4729dc3-ef1c-3212-8aa6-a806245db7d0.roa
File: c4729dc3-ef1c-3212-8aa6-a806245db7d0.roa (raw, json)
Hash identifier: MpNcy4gf192EqWQAFPOqzAUKfYC1GfVK+FilCbrP5NM=
Subject key identifier: 12:8B:87:BF:97:A4:F9:CB:1F:55:6A:0C:79:09:00:53:CE:40:FB:B3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584902EC1F81681215B97F23BCE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4729dc3-ef1c-3212-8aa6-a806245db7d0.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 16625
IP address blocks: 96.6.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:1f:81:68:12:15:b9:7f:23:bc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=f1c9e8bf-d6f7-4d47-a68c-2a388633a491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:1c:e9:e6:d4:b2:c6:fc:ed:46:7a:3e:7f:
c4:b3:41:62:44:cf:e9:d5:ec:18:0d:a1:eb:9f:ef:
39:80:5e:37:e3:3f:83:6b:1e:a3:79:51:74:3b:c6:
69:0e:88:76:c4:e0:41:75:a2:2c:48:9f:d7:de:b0:
26:f9:90:b1:e5:d2:97:c7:32:4c:a3:25:ed:4b:b7:
b6:2e:15:64:e2:04:2c:8c:e5:98:09:00:4b:8e:a1:
53:85:a5:07:e7:2e:63:36:45:fd:eb:d3:9a:15:9c:
c8:fe:5e:9f:bf:ab:ad:ea:50:6b:0d:43:b0:e9:30:
46:b0:23:cf:c0:d8:b8:89:16:66:64:90:96:9a:99:
29:dc:30:08:2e:f4:f8:19:5f:fe:71:60:20:6f:02:
cb:a8:14:59:e2:10:28:34:bc:71:5a:1f:ab:ab:17:
cc:49:b8:f5:0a:00:57:b6:95:24:b8:a1:da:49:5a:
68:1a:9a:24:04:44:3e:17:8a:5f:de:84:07:a3:bf:
bf:58:35:12:fc:c7:7a:fd:26:26:c7:83:19:d1:26:
61:57:58:5b:95:eb:4d:c2:ac:a4:06:43:88:77:12:
b3:eb:74:55:d5:c9:ca:50:47:34:84:4d:17:9e:d7:
7b:d5:ad:8e:44:78:7a:f5:94:f6:6f:a3:8a:4a:40:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8B:87:BF:97:A4:F9:CB:1F:55:6A:0C:79:09:00:53:CE:40:FB:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4729dc3-ef1c-3212-8aa6-a806245db7d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.6.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:af:4b:7c:ca:2d:e3:4c:02:90:ef:c5:38:c4:85:9d:19:28:
ec:b3:96:0f:a8:59:18:6d:06:b3:6a:20:79:57:0c:34:01:20:
b9:b1:04:07:fa:88:3f:6a:38:48:1c:ec:55:fa:8e:14:6d:9c:
b2:2c:2d:f7:ab:f3:26:ca:29:cb:11:a2:0e:40:03:6d:07:54:
24:d8:af:5e:cb:8f:c3:c6:a4:c2:58:39:f5:0d:b2:bc:0e:a8:
0b:1f:1c:9a:a4:b3:52:a5:38:71:49:fd:e4:a9:d5:90:a6:e8:
43:86:11:31:d2:8c:74:a3:2f:9e:8b:7c:b9:53:63:f9:52:72:
9b:c2:41:c3:ec:87:84:7c:36:45:04:e5:32:9e:6c:d9:40:29:
8d:9e:e2:68:fa:43:18:fb:47:87:d6:21:db:b5:5b:c3:32:44:
18:cc:9e:52:51:b9:3a:f6:92:b6:6c:af:b6:53:70:b9:30:5b:
0d:b4:ac:f2:03:d5:7a:32:7f:4b:4c:9e:a8:e8:77:51:87:07:
05:79:1e:32:a4:3e:d7:47:a7:2a:56:58:8d:c2:07:f5:ad:70:
28:cb:a4:fa:ec:05:e1:bf:80:66:6b:be:76:ec:61:7e:b4:40:
b5:e8:a7:9f:5a:96:6e:88:89:02:c0:c1:1f:29:fa:2d:1b:20:
7b:53:82:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:40 2025 by rpki-client