Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa
File: d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa (raw, json)
Hash identifier: UrQYDa3RVHSciXkFs04TwZ6Q2CZ398Dqi77Mj3lDo7A=
Subject key identifier: 99:C5:CB:53:87:1C:72:60:11:47:1E:A8:AB:C9:6B:07:A0:CA:91:61
Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
Certificate serial: 010D0C9F432858484EDAC943A14CB7347139FD00
Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 7311
IP address blocks: 96.125.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:c9:43:a1:4c:b7:34:71:39:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=a28974c9-c38b-4106-a196-3c8fb8082f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a9:50:27:db:b2:46:96:9a:1c:8d:34:bf:65:
88:60:01:f1:64:c3:54:b8:c0:ff:00:df:13:6d:c7:
b2:f6:94:23:77:7b:3a:fd:64:f7:8d:5a:77:9f:7f:
0a:4f:a1:42:69:ca:6b:15:6c:ec:c3:37:29:93:54:
92:c5:12:0a:df:e1:9f:17:36:de:55:44:8f:3b:fc:
43:fe:3c:a9:cf:9a:71:31:f4:41:19:d0:d7:63:0f:
02:88:fc:62:76:c0:3d:b2:5f:6d:b5:b9:ed:2a:c1:
3c:82:f7:1f:5c:18:52:6e:c7:66:ca:b4:60:95:03:
0f:99:e6:a4:04:8d:82:c9:10:fd:71:3b:79:27:85:
92:c1:ea:e5:b9:5c:2b:01:31:a2:ba:36:4d:f4:7b:
c2:e0:18:40:8e:5f:82:d1:32:ba:b6:e8:c1:3b:a3:
77:c1:3e:2d:21:10:ff:84:a2:36:c0:5f:9e:4e:65:
b2:36:15:bf:c3:a4:7f:01:f3:9d:76:57:05:90:6d:
bb:be:3d:59:00:58:68:1d:cf:b9:c6:94:c1:1f:4b:
68:e4:99:3d:b3:a9:2e:88:29:f2:8d:4a:20:fe:a6:
13:53:ce:58:5c:9b:a2:30:23:c7:0a:75:72:74:25:
24:31:bd:a8:1f:6a:70:21:06:d2:d4:8a:7a:8b:79:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C5:CB:53:87:1C:72:60:11:47:1E:A8:AB:C9:6B:07:A0:CA:91:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl
X509v3 Authority Key Identifier:
keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
sbgp-ipAddrBlock: critical
IPv4:
96.125.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:72:99:98:cb:c5:67:db:ba:15:df:74:7b:5c:72:db:f5:75:
f6:33:0c:04:fe:14:d6:da:b7:7f:e8:e5:ea:66:bb:ee:1e:1c:
16:b5:72:a1:64:ec:7f:b6:cd:98:e8:5e:a6:2e:86:32:92:0b:
5e:e4:8a:9d:80:56:5a:e2:f0:54:42:5b:48:2b:29:38:6f:56:
ab:17:f0:c6:4b:08:fa:aa:05:53:0d:56:6a:82:06:13:02:ee:
dc:17:29:05:e1:ba:25:ba:fe:59:59:ac:b8:f2:f0:f0:18:cf:
10:e6:81:98:ba:98:0d:ba:94:76:0f:86:4f:5f:37:0f:57:3c:
85:64:75:40:88:48:5c:04:9b:60:81:4a:db:bd:a9:4a:3f:7a:
6f:5c:55:96:95:6a:6a:66:37:f6:76:4d:bc:46:60:30:04:53:
d0:6b:2d:70:b9:b5:da:90:0f:56:77:5a:0e:b0:c4:ce:02:59:
2f:f8:36:44:62:c4:21:65:1d:d8:80:e2:06:a6:63:15:35:21:
54:6f:b3:c8:31:87:c8:5a:3c:f6:7a:67:72:55:b0:fa:c7:f6:
69:82:8f:66:8b:51:ec:7c:30:be:f2:5b:97:5f:c0:3a:e4:de:
0a:49:3b:dd:d7:41:52:e2:8c:d2:93:33:0f:98:7b:6e:ff:78:
6b:18:69:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:12:18 2025 by rpki-client