Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
File: 1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa (raw, json)
Hash identifier: 6bsiEEw/2CUTvhwBbUTAro6VbJOyPbJPGyTh0Z8YRaA=
Subject key identifier: 22:3E:38:FD:2F:6F:03:82:A1:52:29:2D:33:C2:9E:DC:9D:F9:E5:F1
Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial: 010D0C9F4328584812D53400FD2421ED98AF3770
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 11650
IP address blocks: 155.94.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:34:00:fd:24:21:ed:98:af:37:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=445fa87f-f06b-4481-8516-e453b17a43c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:f8:d3:ef:e3:66:57:85:dc:1f:de:5c:c8:
31:34:18:7d:f0:a4:9e:a5:c3:56:fd:bd:fc:c0:a4:
8c:f6:62:f4:89:6d:4a:e2:ba:a7:72:22:2a:e5:50:
09:d2:68:31:6b:f3:e3:9a:f0:05:38:f4:2d:46:19:
ee:18:c8:26:9e:fb:56:cf:4b:22:7a:45:7c:f0:22:
ef:99:32:57:fe:f8:98:74:f6:e9:82:70:c8:37:7f:
87:f5:9f:5a:48:d4:70:11:02:75:f5:91:88:02:9c:
dd:e2:b3:28:46:71:fd:ec:a9:92:1b:6b:d0:2b:d1:
3b:95:fc:47:08:d4:53:56:e3:33:01:db:3b:cf:5a:
6c:be:32:30:25:30:58:cd:85:37:b0:ce:b5:c9:3d:
7f:55:e8:cc:26:35:ba:80:84:8d:4a:48:8a:f8:81:
22:c6:ed:11:3c:b4:e8:26:b7:95:a6:af:aa:08:3a:
44:9d:e9:3d:40:12:a1:80:3c:39:7a:b4:b9:41:3d:
ae:fd:53:7f:0b:c0:8d:31:93:8d:4e:d3:0a:b4:19:
df:fd:e2:20:71:c0:a0:b7:2c:0a:c4:cf:1a:7d:83:
a5:55:7b:59:d4:cc:97:fb:c2:84:a3:98:89:df:ee:
ce:81:ad:5e:9d:ce:01:bd:bb:ef:82:b6:38:94:49:
6d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3E:38:FD:2F:6F:03:82:A1:52:29:2D:33:C2:9E:DC:9D:F9:E5:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
X509v3 Authority Key Identifier:
keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
sbgp-ipAddrBlock: critical
IPv4:
155.94.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:d5:02:e4:c5:e9:8a:24:38:03:ef:e7:b3:68:72:57:01:1b:
c6:9f:f8:3b:7c:7a:30:fa:9b:80:fa:7e:d1:0c:74:9d:2f:97:
89:88:38:b8:bc:d2:2b:90:ac:e6:9c:66:7a:16:06:e4:52:fd:
a5:15:dc:d9:5d:d6:d7:15:d2:fa:10:ec:3d:c5:ae:9f:ad:08:
00:9c:9e:ce:2f:a1:f1:c5:0f:9f:8a:4d:9f:f1:43:fe:02:71:
6d:d5:e9:db:ff:77:e9:13:eb:68:2c:b7:d1:b3:9b:69:05:ca:
be:46:42:ce:8f:b9:9b:1f:96:80:aa:aa:10:4e:c4:ae:fd:9b:
6c:8a:12:fa:27:e2:f6:7f:30:be:7e:5e:81:6f:48:12:86:85:
eb:ed:0d:0b:81:6f:db:87:b5:c1:da:09:83:d6:41:02:ab:28:
9f:46:d2:9e:28:c4:90:2c:ec:f3:1f:28:3a:53:2e:ec:b8:4b:
47:78:3c:0c:b2:00:17:48:c6:d8:7e:8f:57:19:09:a3:82:31:
e7:dd:3a:e0:1f:61:2c:e0:aa:59:58:65:ea:c9:72:9c:5b:1a:
60:71:cf:fb:bf:bf:e7:0e:54:55:5d:e1:b5:02:e5:69:7e:d1:
dc:36:5f:d9:3b:03:29:3d:22:96:52:68:00:51:fd:72:a9:b2:
35:27:d2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:01:15 2025 by rpki-client