Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f7dc5480-16a7-31a9-a1a9-13b2be0da263.roa
File: f7dc5480-16a7-31a9-a1a9-13b2be0da263.roa (raw, json)
Hash identifier: VFY8nQ0pP9NFqHlN3rhi3sttXBFR4/XlbFG8OcT4Y+A=
Subject key identifier: D6:AA:7A:96:DB:B9:26:01:B7:9D:13:18:A9:04:C2:BB:0E:A9:42:F3
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF8D3715A43D7A378E5B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f7dc5480-16a7-31a9-a1a9-13b2be0da263.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 96.58.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:8d:37:15:a4:3d:7a:37:8e:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=409c2d2b-91c4-4804-8cc2-745a503188b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:e3:d8:27:d9:95:14:a6:72:a9:26:7c:51:
d9:4e:d1:d7:ee:a8:fb:65:54:10:40:6d:3e:21:3f:
84:04:d9:c4:f6:45:d6:cd:da:de:8a:02:07:49:ad:
8b:25:06:83:97:40:f8:47:2a:ab:1c:94:57:21:3e:
da:f7:92:42:8b:11:94:5b:26:d9:23:71:c5:fc:34:
8b:1f:c7:cc:3c:cf:ce:b2:20:64:01:07:b3:7a:5c:
34:75:fc:ee:3c:65:9c:de:78:67:0d:91:3d:ce:50:
80:76:c0:f7:d1:5d:60:80:15:ed:6d:5c:e2:4d:bb:
1d:4d:81:12:f3:1b:48:da:66:f9:c0:ba:4f:24:d9:
4a:c6:92:fb:e6:a0:42:23:2c:c5:0a:e0:7a:1d:2d:
32:76:29:f2:db:85:67:de:48:3c:ba:0c:91:be:36:
c9:bd:dd:47:c2:a0:aa:3b:63:25:d7:ca:22:59:1a:
e1:03:77:b9:be:1f:1b:60:fd:e2:f3:80:e6:51:7d:
d8:62:08:55:78:b2:19:df:8d:1e:e1:4f:c5:37:ee:
e9:c9:73:10:76:f0:36:f2:aa:fe:3a:d8:49:bb:01:
8f:ec:f7:f6:e9:63:e4:a7:a5:8b:72:00:7a:4f:3a:
fa:af:d3:dd:2b:ed:26:0e:9d:fd:93:3a:f2:9e:8e:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AA:7A:96:DB:B9:26:01:B7:9D:13:18:A9:04:C2:BB:0E:A9:42:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f7dc5480-16a7-31a9-a1a9-13b2be0da263.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
96.58.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:fc:5d:91:f8:f6:37:c9:8b:00:81:26:5b:6d:0d:b6:d8:4d:
fa:53:ed:bc:6d:77:da:98:93:c0:d8:f9:eb:5c:7f:dd:9c:ea:
bb:50:17:df:5a:20:19:e2:dc:a9:3a:f7:f1:0e:14:6b:32:d5:
b6:a6:c4:9c:61:27:61:67:01:ab:0f:f0:88:9a:42:e4:32:b0:
c9:0f:5d:eb:d1:6d:09:4a:03:4b:9b:55:b4:2e:44:b3:c0:33:
22:ad:a7:4f:ae:31:2b:d7:57:bf:21:8b:aa:cc:9c:0a:01:cc:
43:d4:39:6d:8f:9e:d5:c3:f5:ce:c6:49:08:2d:67:80:c5:22:
99:bf:9f:de:aa:8b:c3:ad:a3:ec:d9:df:3b:b2:a6:05:a0:45:
eb:9f:7c:e9:e4:58:d3:9e:8a:04:38:12:6c:23:43:a4:ce:0b:
6d:e7:b0:76:ef:10:62:c1:ba:be:bf:29:8d:24:1d:7a:07:bd:
b9:10:8b:3c:5f:f3:08:4e:5e:76:47:7c:4a:25:44:c5:b3:9a:
2a:95:8b:c5:17:14:80:1f:3a:f6:ae:28:5e:b5:ce:b1:ea:26:
56:32:e2:64:7e:39:75:09:0e:0f:db:67:18:57:ba:b2:ac:78:
1c:28:0c:5c:13:76:01:84:4b:c5:31:db:23:ff:31:c1:4a:d5:
e6:da:70:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:16 2025 by rpki-client