Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96e9e19-9766-33b0-b2bb-aab95fa0decf.roa
File: d96e9e19-9766-33b0-b2bb-aab95fa0decf.roa (raw, json)
Hash identifier: NF2icCpwNK6k0EwyhgOOmd4hr73BL4vgV7xebqYuTSo=
Subject key identifier: D4:FC:47:A1:EF:5D:C6:2B:85:B0:77:DA:5D:34:83:0E:C8:33:83:2F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858490B4C2F7CCE1FCA7DA2E1D8C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96e9e19-9766-33b0-b2bb-aab95fa0decf.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 20940
IP address blocks: 96.17.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2f:7c:ce:1f:ca:7d:a2:e1:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=a5656bd9-e1a7-4802-8706-6b9b33474aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c8:f3:ca:40:0f:60:91:21:82:4b:cb:f7:54:
94:e3:fa:e2:9d:a8:7a:cc:47:47:50:e7:88:b7:e0:
f5:d7:33:b4:fb:13:ef:74:a9:dc:33:49:b9:93:13:
02:85:f1:2a:c2:67:51:02:f8:d9:25:9e:af:46:7a:
cd:6a:47:8a:76:e6:b4:7e:a6:2c:7a:83:a4:1f:6e:
16:92:a7:41:26:88:f1:57:a6:42:9a:13:92:46:19:
a3:5d:46:ff:96:d9:90:89:f1:88:7b:97:94:9f:d8:
05:43:40:61:9c:ad:e4:98:0e:ad:01:1e:48:82:3c:
70:94:c3:f3:e4:16:6e:4e:82:ee:74:bb:e5:14:da:
c4:a5:dd:e6:52:d1:37:a6:79:2c:c4:65:8e:80:36:
12:56:c3:85:41:e1:c6:ed:5c:97:71:8b:11:6d:f2:
ff:ab:02:c8:27:fc:1f:5d:f0:86:68:f7:23:33:4a:
8b:69:24:d8:42:85:f1:de:00:a9:74:f9:6d:66:3b:
cc:6a:0d:79:e0:95:2b:2e:db:c4:38:a4:9b:dd:a9:
ab:c4:bd:12:07:06:23:a6:8c:d5:19:b7:0e:90:90:
c3:a0:ac:d7:c5:bc:f0:52:50:8b:ca:fa:29:88:18:
ac:27:d8:19:ad:ad:76:5e:4d:c7:29:d5:1d:84:8f:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FC:47:A1:EF:5D:C6:2B:85:B0:77:DA:5D:34:83:0E:C8:33:83:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96e9e19-9766-33b0-b2bb-aab95fa0decf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.17.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:3c:eb:7f:ae:e8:ed:47:63:da:e8:f6:30:0d:0d:c5:78:8c:
3c:b2:10:8a:04:c7:59:d2:ec:69:da:ff:4b:a8:f9:00:82:d3:
83:a1:3c:09:a2:92:0e:8f:4c:35:01:69:a4:34:b7:2c:20:45:
14:a5:e9:9a:64:ad:c8:9a:cf:5e:12:9f:72:33:05:39:8c:8f:
97:b4:59:17:af:95:ec:75:43:05:50:6d:85:e0:9b:5d:a2:45:
2b:89:28:f0:b6:60:0e:eb:9d:84:1e:23:03:14:bf:41:87:97:
0e:02:0d:e2:70:6f:52:36:69:8d:19:34:bf:03:f1:95:a0:b0:
08:9f:87:9d:e4:a7:8f:8d:33:f5:51:12:ba:90:8e:99:59:2b:
e4:bc:0b:f8:be:26:3b:8e:ac:70:f7:34:9c:77:f2:06:1e:e5:
6c:44:0c:70:ef:1b:9a:b8:ab:c2:36:9b:79:39:c3:65:90:04:
00:70:7a:d0:91:c5:58:d7:6d:0d:bc:c7:23:74:d7:b1:60:dd:
80:35:56:54:10:37:90:b9:c9:19:6c:6a:10:23:37:81:2e:23:
f6:90:2a:ed:a7:19:10:6e:13:6c:bb:5d:84:9f:e1:bc:32:22:
b3:2b:4d:85:bb:5e:bf:81:d5:f7:92:cc:bd:11:84:32:68:df:
d7:43:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:47 2025 by rpki-client