Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa
File: 4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa (raw, json)
Hash identifier: G94baA4b8muxe+ptjVvWqv7wVnxCcftDsEHfGw6pG3o=
Subject key identifier: 70:AF:52:42:DF:F4:55:24:95:4D:EC:1D:25:93:CC:02:F3:A7:C5:B1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848222FF25EC5549407B7A73E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 16625
IP address blocks: 96.7.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:f2:5e:c5:54:94:07:b7:a7:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=c0f9913f-80c0-46a9-bf65-5a76c51fd357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:ce:94:9d:f1:ce:5a:cd:9d:08:c9:4b:a9:
a8:ab:04:c6:5a:3d:6b:f1:f7:0a:c4:3d:d4:78:0f:
fa:ca:70:8a:8b:ed:39:0b:45:a3:2e:92:74:3b:64:
6a:4d:aa:b9:90:cf:70:52:2e:12:91:4a:ea:4f:fb:
ad:06:69:79:48:d2:57:df:a2:5b:4e:1c:f2:fe:1f:
a3:ed:c3:a6:f8:b0:5c:96:70:c0:8a:bb:ad:b2:f0:
b3:b3:29:b5:fb:10:e8:dd:56:7d:be:19:68:26:d0:
53:7d:70:7f:4d:7f:5f:38:29:34:fa:c8:5d:ab:bd:
20:e0:39:fb:9e:01:9f:3e:ce:2c:70:55:23:83:de:
53:b3:b6:95:54:c0:61:89:c0:0a:4b:e5:11:65:19:
47:7e:f8:b5:21:41:e7:69:2b:0e:26:fd:4a:1a:00:
e6:7f:c3:74:48:47:f5:4a:7d:63:0b:7f:6b:36:8c:
f9:5f:28:0a:46:b7:80:f1:7d:81:63:12:2a:79:38:
11:3f:79:e2:86:8b:30:bb:9b:36:c6:72:fc:ed:ac:
7a:55:88:99:87:db:fc:fc:c8:9b:f3:4a:6f:f4:19:
8b:d8:e3:19:19:be:99:35:90:6a:b8:39:fb:e3:c9:
b4:65:06:17:5f:23:9f:70:a5:a2:29:44:5f:8b:ad:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AF:52:42:DF:F4:55:24:95:4D:EC:1D:25:93:CC:02:F3:A7:C5:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.7.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:e1:ec:42:8b:8a:dc:8f:7c:79:bf:93:f9:ff:09:08:6b:d3:
ec:16:c5:d8:a1:44:1f:65:b9:7b:65:55:11:7e:03:8d:2f:51:
e6:dd:b3:49:a7:6b:a9:d7:b3:51:89:80:35:07:f3:53:70:15:
05:b2:c1:b6:7a:3b:fa:de:6e:b4:c4:b9:4b:52:28:a8:6d:e0:
a8:2b:2f:e8:1c:98:b6:f3:16:05:ef:21:53:c8:b5:41:86:86:
da:c7:ad:49:25:61:c2:cd:ee:74:28:c6:eb:5e:58:d1:1c:f8:
95:e1:46:95:b2:3e:2b:5b:43:7b:33:57:b8:e9:4b:20:9c:85:
11:59:61:f2:46:7a:5e:28:57:12:67:ca:98:1d:3c:b2:21:83:
6a:d4:b1:64:cc:98:33:75:43:85:3d:54:af:4f:6b:15:a4:a7:
fb:56:93:91:ec:95:bc:c8:43:9b:70:c6:67:9b:df:03:05:ac:
ef:40:74:8a:36:df:26:c0:1a:55:c2:71:ee:e2:b6:9d:bc:ef:
9c:86:0e:ce:7b:28:fd:ad:03:bb:cb:7a:c6:21:d2:cc:32:d2:
fb:93:cf:01:5c:98:5a:fa:bd:22:fe:ea:57:f6:e0:d0:37:e5:
c9:2a:22:8f:84:02:cf:93:88:c5:41:b0:ee:a2:ee:0f:85:bd:
c5:f1:6f:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL/JexVSUB7enPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
YzBmOTkxM2YtODBjMC00NmE5LWJmNjUtNWE3NmM1MWZkMzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2XOlJ3xzlrNnQjJS6moqwTGWj1r8fcKxD3U
eA/6ynCKi+05C0WjLpJ0O2RqTaq5kM9wUi4SkUrqT/utBml5SNJX36JbThzy/h+j
7cOm+LBclnDAirutsvCzsym1+xDo3VZ9vhloJtBTfXB/TX9fOCk0+shdq70g4Dn7
ngGfPs4scFUjg95Ts7aVVMBhicAKS+URZRlHfvi1IUHnaSsOJv1KGgDmf8N0SEf1
Sn1jC39rNoz5XygKRreA8X2BYxIqeTgRP3nihoswu5s2xnL87ax6VYiZh9v8/Mib
80pv9BmL2OMZGb6ZNZBquDn748m0ZQYXXyOfcKWiKURfi62xdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCvUkLf9FUklU3sHSWTzALzp8WxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGZhYTVmZTgtNGE1Yy0z
YzRlLThiOTctYjhhZTA5ZTFiMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAfcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJbh7EKLityPfHm/k/n/CQhr0+wWxdihRB9luXtlVRF+A40vUebds0mn
a6nXs1GJgDUH81NwFQWywbZ6O/rebrTEuUtSKKht4KgrL+gcmLbzFgXvIVPItUGG
htrHrUklYcLN7nQoxuteWNEc+JXhRpWyPitbQ3szV7jpSyCchRFZYfJGel4oVxJn
ypgdPLIhg2rUsWTMmDN1Q4U9VK9PaxWkp/tWk5HslbzIQ5twxmeb3wMFrO9AdIo2
3ybAGlXCce7itp2875yGDs57KP2tA7vLesYh0swy0vuTzwFcmFr6vSL+6lf24NA3
5ckqIo+EAs+TiMVBsO6i7g+FvcXxb7I=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:39 2025 by rpki-client