Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f221748c-c594-313c-b1fd-f62bdb928dfb.roa
File: f221748c-c594-313c-b1fd-f62bdb928dfb.roa (raw, json)
Hash identifier: 7pSByJvWJ1IiwagCZ6PY8x94xlqIvknxERYs9YUH1eM=
Subject key identifier: 1F:C2:C8:54:F7:1E:DD:9E:09:F8:68:C0:1D:F1:59:E3:02:97:C7:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BC729DF3BBFD36149CAA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f221748c-c594-313c-b1fd-f62bdb928dfb.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7725
IP address blocks: 96.72.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:c7:29:df:3b:bf:d3:61:49:ca:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=5611c3d4-9afa-40e5-a405-84e0c0b1f575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:49:76:7f:0b:c9:65:c9:7f:ee:c2:ea:52:f1:
70:72:b0:0e:55:3c:76:17:e1:b9:6a:b5:a7:0b:25:
9e:d5:e4:b7:c9:e1:66:64:24:02:6c:ae:17:84:57:
24:c3:04:34:79:f2:f0:e3:6a:7c:72:b8:11:e2:89:
a6:2a:64:29:19:b1:c9:4b:a5:43:07:a2:cc:b8:70:
a6:94:48:c2:4b:c0:f6:d4:9b:d2:e3:d6:b3:8b:a0:
90:4f:52:7a:cb:2e:f3:5d:24:89:97:f9:3b:9b:d4:
39:ab:16:09:07:ac:79:44:70:19:1c:1c:26:27:2d:
bd:12:68:36:1a:16:9f:5e:a8:62:17:da:76:c2:1d:
f6:08:51:8b:12:31:f3:e7:cf:8b:7a:93:03:b1:3e:
c3:7d:2f:e1:9e:3b:71:e6:a8:ca:6f:00:40:a8:81:
77:1f:ca:3a:22:50:4f:15:aa:de:40:be:10:93:ec:
1a:7f:ec:39:49:7b:4a:c3:80:5c:fd:eb:f6:ec:39:
d1:9f:88:c3:7a:9f:8f:30:36:7e:c0:c4:e3:88:eb:
3b:34:1b:ce:5c:1f:d0:ee:50:15:7e:82:eb:5d:3a:
55:69:01:96:71:e9:d7:fe:de:25:b9:f3:fc:63:42:
86:00:04:87:c5:35:05:70:e4:c8:4a:04:68:66:2b:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C2:C8:54:F7:1E:DD:9E:09:F8:68:C0:1D:F1:59:E3:02:97:C7:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f221748c-c594-313c-b1fd-f62bdb928dfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.72.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:6c:2d:c2:45:53:2c:7a:30:c0:57:7b:e1:de:2a:6c:8d:01:
e5:7a:72:6f:2c:11:83:d8:e0:e9:3e:61:12:ca:86:3b:07:94:
9a:96:b7:dd:a3:f6:41:ee:99:cc:a2:fa:5a:e9:e2:cf:91:18:
69:fe:95:61:e1:93:46:cc:25:16:ce:7b:70:08:00:d2:7e:33:
bd:f7:68:fb:09:d1:4a:e5:31:12:32:a2:f6:29:80:5c:7f:09:
26:cb:38:1a:b0:1c:b5:4d:63:91:1c:c0:49:fd:72:54:2e:1f:
f4:31:95:d3:82:2f:d8:9f:8a:66:6d:1f:d8:b9:ab:00:14:a7:
80:bd:ae:2d:de:7e:77:6b:a3:2e:79:c5:77:1e:02:8f:37:31:
7e:48:8d:0b:92:87:da:c3:97:cb:b7:41:e8:56:ec:af:5b:23:
ac:e5:15:b3:73:56:05:d5:e0:cd:13:12:f2:47:6f:24:92:db:
f9:11:fe:7f:43:59:d3:36:d7:bd:8f:61:7f:90:dd:03:5b:f9:
fe:d4:c0:96:07:c9:20:93:51:39:4c:c7:7c:c6:7c:4e:2f:c8:
bf:d6:27:5d:42:c2:a7:7c:52:48:93:fb:19:67:31:aa:ad:e4:
d3:1e:33:14:06:dc:3d:93:1e:fb:e2:26:b4:f1:c4:8d:53:2c:
df:7b:43:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:06:14 2025 by rpki-client