Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8396837a-f3b5-399f-a44c-be14bed14320.roa
File: 8396837a-f3b5-399f-a44c-be14bed14320.roa (raw, json)
Hash identifier: g5RSAswmnQDctzF15JLGrlftyPXTYIrjhewE+JmCfw0=
Subject key identifier: E8:9F:30:5B:7B:B2:F4:92:D3:76:78:31:F1:99:5A:86:DD:AE:33:74
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF56FBF36AB0A83ED20EF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8396837a-f3b5-399f-a44c-be14bed14320.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 96.16.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6f:bf:36:ab:0a:83:ed:20:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=d9335ed6-68b8-440d-9a14-cc3207c0f97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:d2:ad:ce:14:5f:97:c2:20:67:f8:d5:fe:
8b:05:83:4d:d1:b9:30:e8:62:24:15:65:24:5e:69:
de:e1:26:03:81:1d:29:ab:9f:7a:35:e7:ad:9a:96:
4a:74:04:13:c6:73:aa:7b:d0:74:08:4b:4d:4b:ad:
60:35:7d:fb:95:bc:96:72:e0:8a:6a:0f:d9:0a:62:
22:fd:0f:18:c1:88:30:a4:cd:65:b0:68:a4:85:e5:
ed:f1:6e:67:8c:17:d6:2c:6d:49:5b:a9:75:f2:ee:
95:69:f7:39:cb:aa:74:e0:fa:bf:2e:68:a2:a4:0f:
ad:fc:7c:b9:b7:13:c8:ce:15:9f:ea:ee:79:01:4e:
5f:1a:03:db:68:a3:8c:7a:8f:05:5c:a2:25:b5:67:
fb:cc:51:0b:55:7a:58:0a:06:6e:73:89:a0:17:3f:
d2:4c:3b:b5:7c:0d:43:73:a0:0c:92:37:cb:88:ca:
d6:60:8e:5c:48:df:d9:55:5e:f2:77:45:d3:28:f6:
61:2c:70:d8:f8:19:47:cc:8b:85:2a:7d:08:85:d4:
68:cf:f1:cb:7b:b7:f0:f9:9e:88:65:cf:ce:ff:40:
be:07:24:b2:38:3d:0a:6b:2e:12:78:93:85:d6:c8:
c2:cc:bc:a8:cc:06:c8:95:c6:69:3f:97:aa:f5:9c:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9F:30:5B:7B:B2:F4:92:D3:76:78:31:F1:99:5A:86:DD:AE:33:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8396837a-f3b5-399f-a44c-be14bed14320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.16.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:d6:18:53:48:1b:7d:14:28:4e:f5:4e:11:77:5b:b3:69:d0:
dd:2b:17:4e:55:33:14:ec:fe:d0:ba:41:56:93:b3:aa:bc:2d:
14:4b:d5:c1:7d:14:d9:89:49:26:34:63:83:54:5a:75:2c:a6:
34:f0:3f:54:42:5c:10:75:94:69:ac:ea:7b:d0:ad:05:c8:b8:
0e:62:66:15:fd:32:fe:63:22:e3:56:74:55:69:89:99:ad:24:
44:1c:32:db:b2:25:8b:4c:82:c9:3e:b0:a1:b5:0b:aa:a5:74:
fd:2c:3a:df:c1:98:5a:5d:20:e6:10:bf:a3:c0:11:fd:28:4d:
e3:70:2f:9a:e5:91:31:f1:d1:54:ab:aa:06:7f:be:04:0a:a1:
f0:4b:73:c7:b3:b8:ec:01:cf:49:fa:50:5c:c0:fa:ab:74:92:
72:c9:3f:5f:ee:2e:6c:06:c4:d8:cc:b9:cb:9e:d8:1f:ab:07:
0b:37:e2:64:3a:4f:bf:01:26:93:64:b1:ff:b2:23:79:6b:ae:
a7:f3:2a:f4:9c:b8:30:9d:e1:ed:61:74:9a:69:43:19:52:e7:
2d:1c:05:61:f3:e6:e4:18:66:2d:4c:c8:4f:df:a4:89:a3:bc:
59:48:bb:5a:72:60:e1:13:e5:85:e0:b1:37:a9:88:77:bf:83:
9c:01:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:56 2025 by rpki-client