Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/ea2b2783-c58d-3775-8b7c-0fa6a1654f7d.roa
File: ea2b2783-c58d-3775-8b7c-0fa6a1654f7d.roa (raw, json)
Hash identifier: XhXkHXQZmwh7XotOybGr90ZTtRyZOwSsBMSzpeXp7jc=
Subject key identifier: 95:AB:F3:B4:24:EB:67:AF:08:CF:3F:92:5E:09:6B:CB:83:85:B2:52
Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial: 010D0C9F43285848159FE10FF58C8F395B4E4680
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/ea2b2783-c58d-3775-8b7c-0fa6a1654f7d.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 393398
IP address blocks: 96.47.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e1:0f:f5:8c:8f:39:5b:4e:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=7695677a-3b0a-4b15-957e-1b580415ec1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4b:1a:b7:87:3d:7c:02:0d:41:3f:83:2a:9f:
1b:08:4b:1d:de:79:09:fc:52:83:87:78:90:51:44:
69:8e:0b:89:a1:c9:23:3a:a2:55:41:ea:d9:ad:8b:
ec:ea:4b:c8:b9:2e:0b:d6:e8:03:89:66:5a:f9:e6:
43:49:67:08:68:0f:f6:ad:ba:ae:74:86:9a:66:c8:
4f:0a:f2:b8:7c:e6:18:da:a5:2d:79:2e:4e:e8:71:
f3:57:8e:42:86:80:be:70:6e:5f:b9:99:18:a5:09:
ba:13:05:71:06:64:46:c2:cd:10:19:b0:8f:5e:6c:
37:ca:41:b5:60:31:2d:9a:b0:d9:0c:d2:69:f6:d1:
94:38:8c:8e:ff:28:80:a1:26:d4:39:a4:6d:44:15:
a9:f8:a6:d3:96:3e:38:f8:70:3c:be:9d:2a:6e:31:
ee:8f:ac:6a:4e:34:aa:f4:00:47:5f:be:09:dc:96:
9c:a3:6e:5e:33:bc:4d:28:9c:c0:cc:84:e0:96:24:
bf:b1:23:e7:d0:2b:97:d4:66:b3:55:86:4d:d1:fe:
44:51:b2:80:cd:9d:ac:41:ad:5f:db:37:48:17:73:
bf:20:e0:33:1f:73:fb:23:85:82:b7:50:08:4b:f7:
43:ce:84:5d:89:d9:1f:24:bb:32:0f:67:aa:85:be:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AB:F3:B4:24:EB:67:AF:08:CF:3F:92:5E:09:6B:CB:83:85:B2:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/ea2b2783-c58d-3775-8b7c-0fa6a1654f7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
X509v3 Authority Key Identifier:
keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
sbgp-ipAddrBlock: critical
IPv4:
96.47.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:9f:5c:e4:72:b6:20:49:32:ed:fb:f9:41:f5:f1:d6:b7:68:
aa:a7:34:d9:49:2b:86:e5:1c:40:a5:9f:95:30:9b:72:9f:ff:
53:e2:5c:83:3c:5e:ab:cb:f9:56:2a:89:a5:26:48:f4:b5:30:
2b:76:8e:b3:99:4a:9b:fe:2c:96:38:1f:5f:87:38:b0:0f:fd:
ac:70:ae:82:c7:b3:2e:31:cd:92:c9:d6:8e:27:59:85:e3:40:
04:12:33:5d:c5:e4:7a:6d:fd:f6:51:81:86:11:31:72:68:7b:
60:15:0e:12:3c:e8:1e:75:22:5a:98:c6:9c:0e:c9:90:2f:b7:
84:ad:a4:c4:50:4f:89:cc:57:b0:43:b5:87:42:c2:28:72:e4:
a1:3a:73:ee:8c:c7:8f:35:0f:b6:e5:b8:02:29:fb:69:af:ac:
55:0c:13:fa:f6:09:0d:fb:77:82:7b:67:43:16:44:13:a3:17:
c7:5c:c9:f1:07:d0:7a:85:88:13:d5:41:53:18:8a:f5:4e:9f:
d3:5e:a7:78:8c:7d:a6:c7:28:33:72:6d:70:77:45:31:e6:33:
70:85:6a:96:3c:97:b8:21:ba:cf:2f:78:5a:98:56:63:be:03:
55:e0:bb:39:83:83:52:50:2b:12:e7:b4:21:ae:ce:85:21:29:
e8:a0:1a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:22:44 2025 by rpki-client