Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa
File: 96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa (raw, json)
Hash identifier: aJPn4hQ/34GHlPQln81kK4MRofKCnhyobqZkdSNk/us=
Subject key identifier: D8:72:69:B7:8B:E1:11:6A:FA:B9:4E:C9:C4:9D:4D:58:B0:2E:0A:44
Certificate issuer: /CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb
Certificate serial: 010D0C9F43285848159FF6B89019A0D0F4680B80
Authority key identifier: 17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 14618
IP address blocks: 170.52.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f6:b8:90:19:a0:d0:f4:68:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=f114c729-49f6-4fc5-8234-59da68e2a2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:bd:0c:45:ea:18:74:c5:ee:69:4f:4d:f2:
36:1e:77:50:9f:4c:f0:6a:f4:98:50:4f:13:07:29:
b2:88:6a:05:2c:45:14:58:39:98:bd:32:25:03:be:
68:81:42:ef:bf:26:de:f2:fc:a3:2e:34:68:e6:18:
b1:5a:19:69:a3:8a:b5:87:72:fc:67:f4:58:0f:26:
7b:7a:5a:fd:b6:f7:5f:46:00:b0:13:9b:b5:c7:86:
4e:75:3d:e7:66:b7:e1:94:a2:d1:c9:b3:d3:64:e2:
2f:92:0e:60:f5:41:5e:d3:23:ba:7c:14:53:c5:b2:
59:f5:d9:ce:e4:9e:14:6b:2f:ba:e8:06:23:de:16:
14:0c:51:6e:09:33:47:70:24:c6:69:8b:f8:cf:19:
47:42:f7:e5:06:8c:18:2b:1c:7f:e5:c0:0b:da:3e:
1f:32:5d:42:f8:2d:ae:f9:6e:03:34:f5:dc:c7:76:
e2:50:30:1a:9e:f0:c3:ef:4f:49:a7:dd:68:27:b6:
fa:f4:1d:bf:63:ca:b9:c7:be:fb:d7:87:f5:8b:1f:
c8:fa:b0:c1:f3:68:cf:31:a8:e1:fd:81:46:c3:3d:
cb:d5:4e:39:5a:c5:64:49:be:25:4a:b5:e0:dc:e1:
b5:c6:af:69:8f:8f:8e:d5:91:e0:13:58:1c:24:24:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:72:69:B7:8B:E1:11:6A:FA:B9:4E:C9:C4:9D:4D:58:B0:2E:0A:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/96b5ecdf-003c-37fd-b621-8fe6b49bd2e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl
X509v3 Authority Key Identifier:
keyid:17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer
sbgp-ipAddrBlock: critical
IPv4:
170.52.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:47:4e:b2:56:5e:80:00:aa:95:fc:5a:a7:aa:98:f5:b5:fc:
dc:c0:54:12:ae:90:4c:f6:6b:c4:3e:d5:b9:03:e3:c5:49:84:
51:f7:1b:a8:78:1a:ab:bc:e4:3b:50:ad:25:98:91:2c:87:28:
79:d4:54:d2:f8:f0:6b:b9:82:c8:85:c8:96:aa:62:6a:d9:bb:
6b:26:00:3a:52:3f:b0:00:7b:cc:15:8f:25:29:97:1f:da:d3:
b3:79:68:20:3a:21:32:09:06:ee:6a:8d:b6:34:7c:57:7d:c5:
21:93:5a:ef:8e:6f:ad:14:d6:1b:0e:57:39:7b:4d:a4:03:d1:
70:5d:0e:72:9e:67:06:e0:e3:b8:bc:7b:e5:b6:c6:3c:07:18:
2a:2d:62:35:e3:84:6d:93:8d:30:65:7b:eb:a9:fa:f3:58:36:
9c:26:d9:a4:87:51:f7:d6:94:4b:ab:8b:eb:86:f1:ce:e9:b1:
6f:3b:a0:45:f8:b8:a5:b9:26:d6:88:fb:54:73:5a:26:03:c1:
8c:5a:43:88:34:68:7c:02:50:c3:dd:7e:61:fd:79:83:70:fe:
0c:41:5f:ed:0b:f3:7d:f0:cf:fc:51:d0:1b:8e:cf:a8:99:8f:
d4:cb:2d:b7:1f:f9:8e:66:32:ec:20:82:e0:f7:6a:e0:6b:c4:
21:2e:f7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:34:50 2025 by rpki-client