Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa
File: dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa (raw, json)
Hash identifier: OODaGF7y8+fahT//gVIMEvVCRx7us//Cv2ymVFLEkQw=
Subject key identifier: 8D:7D:3C:C0:96:23:02:96:4C:61:12:AC:92:51:78:7B:C1:27:C7:36
Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial: 010D0C9F432858480BDA79DD78A7247076A60880
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 46632
IP address blocks: 96.45.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:79:dd:78:a7:24:70:76:a6:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=a8163812-6100-450c-8ba4-a755e155e72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:ea:a2:39:a3:09:c1:49:aa:8b:69:2f:a6:
cb:e7:60:ca:d8:f9:8b:bc:40:a1:99:11:42:af:79:
79:26:be:bb:0c:f5:b3:35:a7:c7:db:4b:ea:4e:af:
f0:30:21:79:dd:d6:3e:c6:6f:8b:7a:f5:e6:b5:d4:
9c:a6:53:f6:ae:f2:df:ae:91:4b:5e:fb:16:1e:08:
77:9d:09:b7:2a:23:da:19:7c:95:3e:69:fa:4c:a2:
79:e8:e6:0b:9f:c3:3c:17:2a:4e:04:78:1d:5e:c2:
78:b7:4b:8e:32:13:59:2d:26:eb:9c:34:ea:83:8e:
29:79:b1:7d:ef:9d:70:4a:06:ea:4f:92:a3:e8:7b:
12:89:49:62:98:f7:ff:d4:d1:69:1a:3a:f5:61:17:
e3:e8:d6:15:92:b8:af:7c:c4:44:c9:11:a3:18:16:
ec:b7:e9:1d:96:bc:57:34:aa:05:8b:c7:a7:ec:05:
25:94:5e:d1:e9:63:46:bf:9f:14:49:51:a2:9c:f7:
90:42:31:9b:99:fd:33:e9:96:b0:d3:8d:f0:a5:23:
5d:71:0d:27:4a:34:62:0e:cc:d0:62:41:c8:75:49:
30:c5:92:b3:15:f8:f4:e3:3d:81:91:79:4b:c3:c9:
36:27:54:cc:c7:c7:83:b8:2a:e0:43:04:d4:53:e3:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7D:3C:C0:96:23:02:96:4C:61:12:AC:92:51:78:7B:C1:27:C7:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
X509v3 Authority Key Identifier:
keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
sbgp-ipAddrBlock: critical
IPv4:
96.45.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:f8:d6:a1:74:65:ac:92:5b:89:6c:c8:83:95:b9:24:d2:2a:
89:6a:e0:06:2e:6d:90:c6:b4:bd:ef:b2:00:da:9d:9d:c1:1e:
bf:97:89:d1:66:38:b2:8f:28:b8:67:a5:ae:a4:e1:76:1d:bd:
da:e2:96:66:f1:ad:fe:06:64:87:6b:b0:52:ea:78:4c:da:f7:
35:e5:6b:77:f5:81:b2:f4:3d:87:21:a7:7a:33:fc:57:08:cb:
ca:09:47:07:ec:47:e7:5b:e2:ad:97:b0:51:d8:be:a7:38:6e:
de:51:e4:b5:43:41:5c:cd:3f:b6:88:83:97:ec:9b:7c:13:73:
de:9a:03:78:44:18:e2:95:8b:2d:e3:d8:7f:2b:79:dd:b4:70:
a9:42:76:5d:59:16:e7:56:b2:c7:36:e0:a2:23:5a:36:04:5d:
ab:a1:ba:e7:ec:f6:f5:74:65:67:8b:7f:cf:1b:27:e2:ab:13:
18:41:a5:48:01:27:c6:c2:1a:7c:0e:15:8e:2c:e8:ae:c5:13:
fb:df:e3:11:28:f4:37:02:cb:54:c6:23:ec:5d:c2:87:7f:d2:
55:b3:74:61:d6:1e:a8:a1:33:6a:ed:44:4a:75:9b:f9:b1:22:
c8:3c:18:77:84:7d:f9:f5:f0:08:73:bf:2f:0b:d0:0b:6c:64:
4c:d7:fc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:31:09 2025 by rpki-client