Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a53ffea0-ec32-3128-9644-d66089a87ae4.roa
File: a53ffea0-ec32-3128-9644-d66089a87ae4.roa (raw, json)
Hash identifier: ioFeBPYQo8YgdUJvhv9A1bj6Rmy8otvxVVtApW+ZesQ=
Subject key identifier: B9:91:59:07:D6:E3:7B:5F:25:DD:3C:66:55:76:D2:15:F6:6D:0A:F8
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584878BB0A5B78AC217E93A05AC0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a53ffea0-ec32-3128-9644-d66089a87ae4.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 96.2.0.0/15 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:0a:5b:78:ac:21:7e:93:a0:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=af247b44-0619-40a8-ac72-e121819456c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:4f:06:7b:ed:24:68:87:fb:13:3e:d8:4d:
20:c5:6d:a4:44:45:e2:95:89:a8:d2:78:f7:e6:fd:
44:0d:08:87:6c:15:04:67:49:43:3b:d8:03:0d:fc:
0f:4f:ea:e6:87:4b:72:26:4b:c6:a6:25:02:54:a4:
0d:f7:cd:e7:8f:e0:e6:8a:1c:7c:9e:87:f4:3f:f3:
15:16:48:b6:f0:e4:91:1e:c5:55:af:fa:99:9f:d9:
3e:15:ea:aa:c4:82:af:7e:e0:1b:0c:77:85:54:2c:
0d:9e:0d:55:23:81:d4:d1:45:d4:2e:d4:2e:3a:66:
5d:15:e8:7d:14:69:28:c6:af:30:80:4e:bb:06:d7:
70:90:e7:5e:18:4b:6c:2e:50:97:6a:7f:d0:04:89:
cc:c2:53:27:91:50:d2:e9:5b:93:e3:86:ce:08:5a:
b8:4a:29:36:90:19:c4:d2:9a:5e:52:43:aa:4f:8b:
6b:3d:cf:f0:20:1a:b2:ac:a7:88:37:4a:e6:20:d8:
fa:2f:a9:1b:b6:bd:6b:17:f8:8f:fa:51:73:5b:2d:
ef:d9:4c:9b:2e:25:c8:35:88:aa:57:8e:b8:fe:87:
e4:b8:91:8f:61:4c:e1:7a:6c:4a:54:42:3d:03:33:
ae:37:8d:84:1e:30:da:77:bc:91:7e:28:15:bd:8a:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:91:59:07:D6:E3:7B:5F:25:DD:3C:66:55:76:D2:15:F6:6D:0A:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a53ffea0-ec32-3128-9644-d66089a87ae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
96.2.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:54:8a:48:ad:c7:5d:60:51:36:83:a6:a4:e2:4c:ff:90:a1:
2e:c7:fe:af:82:63:6b:a0:06:2d:cb:79:56:ec:8f:72:33:45:
ad:c7:19:b3:db:2b:b4:9c:c6:51:03:69:ae:80:d0:a4:ad:81:
93:80:ae:79:05:4e:3a:b2:f3:1a:50:6b:0e:9a:1d:2c:b7:ce:
75:d0:c8:ba:ba:55:5c:bb:2c:2b:34:0a:77:55:d0:94:8b:f8:
8d:85:7a:d9:6d:06:3e:c4:ef:0e:b7:d3:3d:99:eb:e1:75:82:
e3:a6:1b:aa:fd:35:e5:47:41:b7:63:a2:2f:12:7d:09:f0:a7:
18:17:d4:b0:0e:1b:ca:4e:cd:63:20:60:99:23:3a:11:9a:bf:
dc:f3:dc:5c:c5:6a:81:07:dd:f6:1d:af:8e:f7:de:3d:2d:d8:
77:76:b6:5d:2d:c3:74:bc:be:f1:e7:d4:87:19:d3:0b:76:83:
86:24:0f:43:00:31:0f:3b:95:04:55:aa:e3:f9:3b:a1:e2:12:
a5:ea:a3:ec:93:36:7f:d4:db:79:f7:32:db:4e:b8:e6:e3:e9:
9b:91:f6:2a:f8:c7:b5:c2:f7:25:6d:aa:7c:66:e3:b6:98:4f:
f2:07:e4:90:33:af:cd:14:86:aa:40:96:cf:28:9c:b4:3b:87:
b5:eb:66:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:29 2025 by rpki-client