Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce7623e3-7753-3c28-8194-8d0e0b136a6f.roa
File: ce7623e3-7753-3c28-8194-8d0e0b136a6f.roa (raw, json)
Hash identifier: ym44yL4kIpki8vwNiRkoG7bOMlG45MeMJqEY1HdlD7Q=
Subject key identifier: DC:4E:07:5D:43:D2:B0:CF:A7:6B:54:FA:B4:9E:FB:D3:26:08:8C:32
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285847DC649CB9FD5CF98745773780
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce7623e3-7753-3c28-8194-8d0e0b136a6f.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 852
IP address blocks: 96.1.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:9c:b9:fd:5c:f9:87:45:77:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=8cffd86e-a0ff-4ae0-86e3-2d41d6554754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:bc:30:36:b4:f8:97:55:f0:fc:ff:cd:42:
b7:65:6e:94:03:35:57:60:f3:c9:9b:fd:a4:08:a9:
c0:ff:2c:08:4b:07:36:26:b3:85:09:f2:07:91:21:
b1:8b:e2:8c:db:7c:cd:11:40:b2:ab:54:b6:9e:85:
24:7d:dd:8f:b3:89:e3:fa:65:f5:78:2f:09:8a:fb:
ff:ff:5f:51:4b:3d:7c:21:3f:9c:d5:29:19:ed:ba:
2a:3c:5a:5f:ad:f5:5b:75:20:56:36:1d:94:0d:ba:
18:52:4a:6a:4e:01:d5:30:01:cf:05:8f:f5:f5:3b:
7b:8a:da:e3:98:40:f4:ef:2a:45:45:f7:78:66:cd:
ec:44:fa:42:f7:30:d3:2a:c5:35:0b:87:53:02:39:
f6:1b:62:1e:90:57:db:90:71:ec:89:41:16:46:52:
b8:4a:ae:2b:4b:dd:8e:e6:84:d2:35:c5:b9:ed:51:
50:c9:41:8d:01:2a:26:62:a1:ad:fd:79:85:e4:06:
72:59:a1:41:f0:68:90:4e:57:96:06:f0:03:e3:a2:
9d:25:da:2c:2b:ab:f3:f8:e4:1b:ec:cb:c5:3f:6b:
42:9d:04:dd:c5:9a:bb:ee:25:46:80:d5:78:7d:83:
9f:79:37:b7:cc:85:73:c1:19:dd:c8:d0:0f:4f:53:
70:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4E:07:5D:43:D2:B0:CF:A7:6B:54:FA:B4:9E:FB:D3:26:08:8C:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce7623e3-7753-3c28-8194-8d0e0b136a6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
96.1.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:48:06:68:0c:de:70:fd:03:3c:00:15:63:d4:bc:e4:9b:70:
84:30:71:e1:0a:47:d6:28:6c:8c:1f:c8:2c:69:d2:78:80:d0:
05:86:6e:cf:52:24:3a:15:16:96:40:a3:65:ce:cc:ec:4d:6c:
c5:13:ce:68:4b:ad:78:ac:9f:3f:5a:ac:6d:78:56:1f:81:9a:
4f:d7:fa:c3:15:a3:b7:a2:b7:28:38:03:f5:c0:f8:81:55:31:
f6:37:6c:83:8c:11:4a:60:b6:56:0b:8d:14:e1:64:5c:a1:0f:
03:de:67:e7:3c:f2:b2:dd:5a:cf:12:a7:66:d8:9a:86:45:9d:
91:2e:8c:1f:67:17:38:f5:a3:08:7d:e9:c4:fc:66:34:6f:24:
5c:d8:01:d7:7a:5d:eb:3e:e0:48:df:58:36:1e:ea:f7:c0:7e:
68:44:91:ec:33:ae:0e:ed:63:5b:fc:1e:61:d0:df:ef:fd:46:
fd:4b:09:59:17:fc:64:22:2c:f1:22:ea:19:43:94:5d:b8:40:
08:79:c3:70:db:69:9b:9b:22:71:b8:a2:b5:ab:95:46:65:04:
9d:fc:9d:1e:78:76:46:71:88:5e:ce:31:08:95:72:4e:fa:84:
b0:56:2b:a5:8c:a5:68:c9:48:82:ee:0c:5a:18:77:62:f1:44:
5f:b7:f0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:07 2025 by rpki-client