Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68aeb51c-a993-39b0-b8a0-f9d56bbdf8e3.roa
File: 68aeb51c-a993-39b0-b8a0-f9d56bbdf8e3.roa (raw, json)
Hash identifier: 8NAIZIw0kCj0DR1/dIHgYXSAJDba5KdCyrmUdl1zUGI=
Subject key identifier: AA:17:98:93:B4:E8:11:DA:07:C8:42:7B:FA:8C:2C:C5:34:5F:14:97
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF570F76FEBD76D3441E4C5
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68aeb51c-a993-39b0-b8a0-f9d56bbdf8e3.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 96.16.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:70:f7:6f:eb:d7:6d:34:41:e4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=31e791ce-bddc-454e-a9c8-e92718fa68d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:82:c3:14:f5:3f:9e:76:c9:6c:7f:d9:1b:
ea:15:f6:4a:2e:28:3c:eb:05:fb:2b:46:49:e1:1c:
fc:e0:4a:d4:71:ed:1a:e6:24:05:4a:21:eb:36:a7:
6e:0b:49:09:fe:9b:73:a6:33:e4:d4:30:66:14:45:
e1:73:cb:d2:ef:e6:59:0c:2d:44:72:81:ff:05:fa:
35:6a:e7:ed:e5:61:2c:91:73:a7:9c:63:56:bc:39:
bc:5f:b9:d7:96:50:25:48:21:31:17:be:cc:06:73:
29:66:5a:ce:01:29:be:7e:80:39:c3:72:e8:94:c1:
d2:cc:07:ed:8c:20:55:ae:4b:7c:d6:0b:8e:e9:73:
87:6e:08:a4:2d:64:6e:de:bc:bc:4d:75:c8:df:c4:
94:7f:fb:d0:4a:f6:9c:b8:e1:ec:9d:70:d9:10:62:
da:ab:8e:d7:86:49:2b:2d:57:13:e2:a4:65:ac:eb:
ef:e0:59:b6:3d:d4:07:0e:7f:b8:6d:c4:86:c8:57:
d3:22:ed:41:05:2c:6c:97:74:b9:49:cb:40:69:a2:
dc:6b:84:f1:c5:5d:fe:cf:60:37:9c:3f:e8:39:02:
15:e6:ea:0f:e9:7c:88:94:0c:e6:77:67:3c:55:c7:
48:aa:aa:5e:80:75:49:ae:cd:a9:9b:fa:4a:0e:2b:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:17:98:93:B4:E8:11:DA:07:C8:42:7B:FA:8C:2C:C5:34:5F:14:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68aeb51c-a993-39b0-b8a0-f9d56bbdf8e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.16.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:a2:81:15:75:af:ad:d0:24:d8:c3:aa:c9:03:af:b2:73:73:
d6:50:8b:59:32:f4:63:2e:ac:48:ab:be:92:8d:eb:3f:88:61:
d6:e1:fd:d0:b9:10:75:c9:71:29:ea:55:e8:db:e2:ba:33:03:
1a:c8:23:60:00:cd:13:b6:e0:7d:3a:df:d0:cb:05:10:db:7b:
c7:bb:4b:30:0c:71:54:b0:29:68:9e:c4:ea:ad:0c:da:fc:e5:
a5:da:13:84:07:36:e9:fe:b7:8f:fb:a7:e0:52:a0:33:48:9b:
a3:ab:1c:d9:d5:df:43:32:d7:89:74:13:8a:5f:55:ed:6f:9b:
02:74:15:20:46:4d:06:f3:5a:f8:7b:91:db:66:76:88:6b:5c:
4a:b8:03:10:66:cf:c5:8d:02:18:bd:14:7b:e9:6c:ce:28:3c:
0c:ef:03:04:4d:f1:a2:17:1e:ce:2b:23:cd:5d:27:45:1c:f3:
b6:56:1f:29:0b:4f:44:59:25:89:ea:60:2c:fd:c2:cf:70:9a:
29:02:ca:86:d4:76:82:68:02:e1:f7:28:18:4e:6e:3e:c9:fd:
94:9c:cb:14:17:fa:d7:97:6c:b4:2a:a0:b2:96:a3:e0:77:b7:
25:85:88:22:8d:e1:5f:81:9c:60:e3:97:d0:e4:cc:d2:c5:c9:
fa:2f:7f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:41 2025 by rpki-client