Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4eb1d9a7-3b58-35cb-a677-0f89b1cb4385.roa
File: 4eb1d9a7-3b58-35cb-a677-0f89b1cb4385.roa (raw, json)
Hash identifier: KXee9i1Ri0oeWoeJ4LdJ2Ok2BRqF8zT0fV5ZQbTRr5g=
Subject key identifier: A0:B9:A5:2F:C4:10:66:F2:83:C3:3C:93:00:8D:A6:76:F7:3B:0E:FE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848222FF1622181667B5C6645C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4eb1d9a7-3b58-35cb-a677-0f89b1cb4385.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 16625
IP address blocks: 96.7.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:f1:62:21:81:66:7b:5c:66:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=34d6b4a7-4961-41ad-915a-8897c5375da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:c2:db:19:46:5c:51:c2:d3:8c:3b:b0:10:
58:b1:c0:4f:b4:da:3f:b8:37:ef:42:46:85:e6:c8:
42:3b:c7:4b:80:be:8e:c4:1e:13:b1:ed:34:26:1e:
0a:18:94:03:90:a3:6e:59:2f:4f:7c:59:a5:d4:cd:
f7:a7:4a:ae:21:b1:83:dc:80:33:64:6a:9e:a5:8a:
71:d4:6f:fb:2e:d5:be:8d:df:fd:9d:af:fb:04:84:
1a:bd:d9:ef:5c:88:94:34:25:ca:59:c9:ac:db:b1:
9f:28:13:f9:eb:d0:98:e6:5b:81:55:2f:7d:0e:21:
ce:7d:11:a4:08:b7:79:db:63:d9:b9:a5:8d:a1:bb:
e0:c9:f7:62:59:ed:f6:ed:17:55:00:5b:3d:44:ba:
ac:49:08:4c:a9:18:a6:50:91:b8:10:1e:ab:90:80:
ea:51:da:3d:a1:ee:92:bb:2d:47:f6:80:b3:3a:a2:
d5:59:b2:95:73:7c:8e:d8:a1:c4:56:23:c1:fd:a1:
e4:9e:b1:e0:af:85:d8:ae:bf:5f:b7:7c:35:da:09:
12:05:9f:ff:80:2b:d4:0f:a0:75:ec:cf:cc:5f:06:
ec:d4:6a:d2:9e:ff:70:9c:e0:0b:49:9a:c7:51:2e:
95:51:e4:00:e0:22:57:93:bd:21:e4:bc:6d:c2:8c:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B9:A5:2F:C4:10:66:F2:83:C3:3C:93:00:8D:A6:76:F7:3B:0E:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4eb1d9a7-3b58-35cb-a677-0f89b1cb4385.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.7.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:76:f5:f7:7c:67:b4:81:8f:7f:ff:70:34:0c:40:90:4b:f6:
1d:7e:b7:5e:b0:1c:ca:f8:8b:96:2d:a4:c7:2f:05:75:69:f9:
ef:29:b1:b5:10:f9:88:32:a0:68:f0:d2:7d:4f:9e:d6:bb:3d:
3b:0b:9f:ef:59:f4:4d:65:c8:80:7f:88:40:1e:29:90:0f:50:
cc:71:b5:51:fd:20:ae:d6:d0:c1:5c:e9:bf:3e:d3:d0:f5:93:
ca:13:84:c2:54:12:fe:07:45:f1:4b:6a:12:ee:23:01:4f:ab:
d8:04:b6:4b:d4:9a:d3:a5:d0:14:fc:e1:db:16:02:e8:c6:df:
9b:a1:1f:94:c0:c2:39:b0:f8:54:4d:00:b3:a4:ab:7c:84:a1:
fc:31:f4:dd:14:86:af:ed:25:9c:24:3f:c7:7b:2f:81:cd:b9:
75:d4:5c:f5:8f:5c:0b:73:a9:1e:8c:fc:71:f9:8a:50:fe:32:
ab:42:11:ff:a9:c7:79:be:8f:52:c0:51:cb:2d:25:bb:86:de:
42:a8:a8:3d:40:7b:a8:58:d4:7e:1d:a3:6b:c0:ce:52:07:dd:
2e:c4:f9:74:9b:a3:a2:7a:bd:81:f2:42:ab:9a:30:b7:1b:71:
56:7b:5e:63:83:f9:9a:94:5d:d2:23:52:33:05:b5:1f:bd:7c:
f5:30:63:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:04 2025 by rpki-client