Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/28fa8d74-0da4-3fe2-baff-33edf683c6f5.roa
File: 28fa8d74-0da4-3fe2-baff-33edf683c6f5.roa (raw, json)
Hash identifier: k0rL7HdQDrwc5ebV6iT5e1fMyl8gOMnCJKsC8Pesrz0=
Subject key identifier: 09:9B:38:2A:85:C7:A6:DA:7E:42:58:75:B2:EC:4E:A5:D4:5C:02:55
Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial: 010D0C9F4328584867FAE7DBCC5B1617E3735180
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/28fa8d74-0da4-3fe2-baff-33edf683c6f5.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 53869
IP address blocks: 199.47.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:e7:db:cc:5b:16:17:e3:73:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=b2a22b94-782d-49de-b72b-154cec9e54c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:95:ee:a6:66:d8:c7:24:a6:d8:28:d1:60:
d3:b7:2b:49:fb:e9:c7:38:f7:e6:5c:46:8c:8a:0e:
6d:70:83:40:a7:43:6b:e4:c8:72:3f:12:38:31:c5:
e4:65:12:68:52:12:19:9f:83:a2:22:83:0d:bf:70:
cb:2f:4c:47:27:72:45:cd:a5:dc:b8:19:b9:89:8b:
56:93:af:2a:1a:37:69:bc:58:8e:98:f9:1d:01:e5:
c3:d2:af:01:77:32:1f:d1:7c:db:5b:9e:76:96:20:
95:20:8a:f3:e7:da:88:0f:45:5c:16:46:a3:60:d5:
09:a5:2c:c8:79:57:c0:22:c0:7d:e5:48:1e:04:01:
4f:20:d9:13:e6:e0:59:37:9f:fc:73:32:3e:da:88:
a0:06:79:bb:c3:b6:c1:05:27:41:d9:1c:de:bf:d3:
c3:e9:2e:26:58:cf:8e:28:0a:4f:27:dd:76:79:f3:
12:bb:51:fe:3f:33:98:94:3a:fe:1c:42:f9:8b:7d:
d0:33:be:6b:fd:2f:6d:17:fa:67:8f:81:df:3f:c4:
e8:18:3e:98:fd:6f:54:60:02:28:0e:81:27:16:50:
2c:22:d7:e8:40:cf:d4:77:7c:dd:20:d8:ee:11:11:
7f:de:42:f2:81:9f:c0:b8:d4:34:12:dc:12:90:2a:
f5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9B:38:2A:85:C7:A6:DA:7E:42:58:75:B2:EC:4E:A5:D4:5C:02:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/28fa8d74-0da4-3fe2-baff-33edf683c6f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
X509v3 Authority Key Identifier:
keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.47.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:90:b9:9c:2d:67:38:a0:e6:f5:e3:b8:4c:f3:59:f7:79:5e:
5b:e8:25:f4:f0:49:7d:0c:61:a7:4e:6d:39:1e:e2:78:c8:05:
74:12:4b:a3:cc:46:85:21:35:08:c0:ab:c9:de:17:d7:80:5c:
3d:e1:d3:69:0d:99:9c:a5:4b:89:45:20:56:7d:b5:ab:36:ec:
43:71:6a:77:9d:38:41:53:1c:6e:cc:d0:0c:6a:9b:89:ad:f8:
48:53:5c:1d:90:e8:d9:47:01:05:9c:75:00:af:c2:cc:de:d3:
61:d3:69:05:39:14:bd:fc:90:66:25:33:c2:fc:69:64:6e:ad:
ce:c8:0a:0e:c2:0d:87:97:94:5a:8d:b4:fd:16:97:88:bb:16:
3c:56:2f:ea:a4:05:c8:1d:d1:53:20:a4:7d:42:13:6a:13:aa:
a1:1f:9a:3c:c9:3f:25:11:27:c6:90:27:01:c5:ed:0f:1d:f9:
50:86:2e:c2:4b:b0:a0:1e:81:28:4c:1e:ca:c5:41:2a:29:73:
a2:d2:4a:80:02:13:86:8e:b2:fd:c0:1b:25:ee:8e:e6:6d:bf:
98:29:1c:7e:f8:f2:1a:0d:8b:c5:9e:dc:d5:7d:dd:5e:df:a6:
9a:b3:2c:0c:5a:4c:9e:c1:c2:1f:9c:f3:8b:c3:8c:e3:44:7c:
33:c2:3f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:30:04 2025 by rpki-client