Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa
File: bcc973e1-9d01-3d4e-85af-27d694043429.roa (raw, json)
Hash identifier: m9PLZXwbNNZAlR8f++Rj71S5/HsR2XbdnWOFNujl1MI=
Subject key identifier: 74:9E:5E:2F:A4:30:F2:0B:40:55:60:6C:E9:3F:D8:78:E0:40:DF:23
Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial: 010D0C9F4328584867FAE7F3B219017CC3907680
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 396982
IP address blocks: 199.47.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:e7:f3:b2:19:01:7c:c3:90:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=55597b10-db2d-48e7-95dc-3f1d84c9662d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:62:58:7d:98:2d:d7:6a:e3:95:50:00:ad:35:
e9:c7:6e:58:2f:ea:97:01:63:c1:ad:df:c0:29:88:
60:15:0c:7f:37:be:44:7a:22:b4:7e:c7:9a:8d:16:
07:cb:77:20:c0:d1:2f:be:f9:4f:8d:5c:43:2e:0f:
52:bf:8d:84:ad:80:44:4c:ef:34:d3:d6:7f:7e:03:
39:28:50:dc:0b:47:2b:cd:01:21:9d:9c:bf:2e:25:
76:d6:50:78:33:90:81:b1:d9:47:bd:a1:fb:4c:94:
b4:fc:39:bb:1d:8b:9c:1c:b0:2d:cd:78:37:4a:98:
19:04:de:f7:7d:51:f2:7f:8e:9d:38:f8:83:1f:83:
0c:12:48:c1:f9:35:e6:ef:cf:4d:da:7a:e0:03:96:
77:50:dc:99:e7:d5:7a:30:44:2d:46:18:fa:75:6d:
50:6d:35:17:3d:dd:c1:76:46:0c:b3:05:e8:1e:4e:
36:9a:1a:b4:a6:71:e5:f2:b9:90:75:b4:a2:e1:ef:
5a:9a:04:c5:5f:86:c5:45:59:c0:c4:1d:00:54:35:
f7:16:6a:97:4e:ca:61:c8:f6:1f:71:aa:29:c5:b1:
37:63:94:00:40:ba:0e:5c:2d:5c:b8:2f:3f:66:ce:
99:89:ea:01:d6:b4:b1:5f:6e:21:92:37:50:57:b2:
bf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9E:5E:2F:A4:30:F2:0B:40:55:60:6C:E9:3F:D8:78:E0:40:DF:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
X509v3 Authority Key Identifier:
keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.47.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:93:9f:7c:16:75:ff:82:63:d8:2b:a4:bd:9b:a4:2c:23:90:
83:5e:a7:04:5d:6b:e5:e8:24:cc:1c:6d:8c:a2:df:b8:2f:ba:
d2:df:f6:85:28:0b:6b:7b:f1:39:49:9f:4c:78:2a:41:5a:47:
e5:52:51:c7:33:d8:47:28:f5:b0:ff:32:b0:49:e7:39:d5:0e:
03:be:b1:2c:5b:ff:18:23:b0:7e:ee:59:e1:8a:71:cb:ae:5d:
31:6c:9e:7d:4e:f0:6b:66:fc:24:9f:de:b0:5d:c4:a5:a6:c3:
83:70:42:d6:56:b6:cd:66:9a:c5:bc:31:4d:08:69:8d:3d:99:
8a:7e:7f:6a:25:98:eb:9f:1f:91:be:f2:9c:05:40:f7:f6:e8:
95:a3:5d:19:dc:a7:1f:65:b5:45:aa:34:e7:b2:f9:99:3b:7e:
2a:a5:a3:d7:f3:15:2a:6e:f0:03:f6:09:ed:bb:e6:d4:22:4b:
d5:91:4d:58:78:6c:e3:68:0f:17:b5:4b:7d:a3:8c:c5:a1:42:
34:5c:03:f0:22:12:16:b5:af:0f:a4:14:3a:1b:f4:38:12:d9:
20:03:a5:a7:d6:61:3c:0f:1e:39:e4:0a:70:78:f5:a7:e6:4b:
c5:dd:33:5d:36:89:f8:02:ee:e6:2e:0e:b3:f2:9d:5f:ae:96:
de:4f:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:30 2025 by rpki-client