Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa
File: 65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa (raw, json)
Hash identifier: tH04p5B/UBEwQ+fon75lP2eLNEnEv+PR3Jsyy0WPGWU=
Subject key identifier: 1C:07:22:9D:14:66:C4:9B:F0:A6:AE:6B:26:76:81:DB:69:CF:C2:08
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF563D921D8143D5FA26820
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 96.16.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:63:d9:21:d8:14:3d:5f:a2:68:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=00250b2d-8e17-460b-9a7e-0639b12cb155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:ae:68:ea:e5:aa:b8:ed:0e:45:56:9d:1c:
9d:eb:0a:6b:ee:4e:ab:5f:12:45:6c:45:8d:99:84:
40:43:fc:6f:79:d6:6f:43:92:66:e3:12:a7:29:07:
f1:84:a2:0f:b7:48:a6:f0:4a:39:45:b8:61:52:6a:
17:ad:f3:0a:38:26:56:62:c6:9d:66:16:e2:73:7d:
27:0f:c3:61:c9:e5:64:f6:92:0c:23:24:e8:69:99:
e6:2c:8d:b7:eb:53:fe:ca:49:69:11:db:b1:64:10:
37:0c:04:64:66:79:ff:90:05:09:88:59:00:69:ef:
12:f2:53:1c:6c:6b:72:c5:20:c4:c2:81:f2:0e:72:
b0:6f:74:de:8d:31:05:44:72:ed:2c:b4:97:0b:00:
fc:59:71:75:78:aa:e7:d5:46:b3:06:85:47:97:a9:
72:1b:b5:6b:05:df:55:4c:f1:26:f4:ce:b5:b5:6e:
f3:9a:42:70:0b:dd:0e:b5:1e:6f:eb:6d:a5:72:e4:
27:c0:df:6e:81:94:70:13:51:88:39:f9:c1:14:55:
9e:e7:7a:de:e2:41:dc:70:30:3d:e2:20:f6:b0:86:
ac:7f:97:20:87:91:b3:12:61:01:0a:10:7b:af:2d:
69:9f:a2:c8:98:ff:bf:03:fd:ff:a0:5e:c9:e7:eb:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:07:22:9D:14:66:C4:9B:F0:A6:AE:6B:26:76:81:DB:69:CF:C2:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.16.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:56:83:83:cb:17:82:20:b6:46:77:6f:b0:99:04:d8:25:ca:
f4:7a:7b:7a:f7:f6:43:b1:42:88:b4:29:f6:23:5d:17:41:c0:
ea:b7:0a:eb:04:c5:b5:b7:b1:32:8b:54:1a:76:1e:5e:38:c6:
5e:b4:54:ea:5d:32:39:14:24:8c:9f:b5:13:29:62:5f:49:06:
1a:a4:80:7c:b0:22:b9:fc:ae:1a:d2:a1:92:90:78:ff:8a:3c:
ac:29:0b:e2:99:ea:37:3c:6b:77:71:78:ce:48:d8:0b:cb:3e:
64:a0:63:f1:3f:e1:ec:6e:89:d5:aa:2a:18:95:03:b0:a9:1e:
59:c3:d3:42:67:5e:f9:95:5d:e4:a8:c1:57:d5:cc:9e:7a:f0:
02:82:0d:cc:36:fb:25:9e:b8:00:78:dd:19:e6:4d:9c:ff:a3:
9b:d9:fc:59:74:d8:9e:3d:a0:b7:fc:25:94:35:70:23:7b:26:
df:4e:df:22:bb:ec:d3:2e:29:2a:73:bf:52:28:dc:98:a6:01:
34:8a:1a:11:f8:e6:e5:51:af:f9:71:21:3e:8f:85:bd:85:eb:
54:41:63:2b:24:e7:a8:b8:33:e3:41:f7:2e:b6:73:92:64:5c:
1d:00:32:11:05:63:97:8c:9e:96:a2:9f:d5:81:71:66:74:8a:
21:66:fb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:48 2025 by rpki-client