Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa1f6cf5-77ee-3782-b327-05f639472e78.roa
File: aa1f6cf5-77ee-3782-b327-05f639472e78.roa (raw, json)
Hash identifier: GtOb4IJFH+bIZXnDhcRGmbl9ZMH/6IRFtrjDRhGVUj4=
Subject key identifier: 91:2A:67:83:A1:0D:79:95:B8:8F:92:E9:3E:4E:CD:B1:30:5B:5D:6C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848222FF14081623D99F125D390
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa1f6cf5-77ee-3782-b327-05f639472e78.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 24203
IP address blocks: 96.7.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:f1:40:81:62:3d:99:f1:25:d3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=e823c910-9f0b-4962-915e-c4c2265f5599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:89:b3:f2:e7:5d:67:ad:37:7c:30:e6:dd:
fe:0b:b4:f1:7f:03:a3:3b:d5:7f:e5:bc:fe:d1:75:
ef:3b:e3:aa:48:b5:72:2d:52:c8:be:ef:ad:7b:04:
e8:35:83:c2:a6:94:d1:fc:1d:6a:c9:07:12:ea:36:
86:4c:0d:c4:49:65:d5:76:b8:b6:b7:a3:99:a3:e0:
e9:cd:87:87:2d:df:30:c8:8b:b8:86:6b:cb:18:8c:
07:66:f7:7a:55:13:26:be:9e:e0:f5:be:11:6b:fc:
90:93:54:29:53:92:cc:eb:28:f7:53:bf:c7:eb:97:
25:77:08:86:a5:b9:b5:52:10:d0:0c:a4:16:33:9c:
6b:71:2c:d1:0a:18:f8:18:4b:3e:f4:1e:d6:1b:a4:
08:b5:71:35:5f:2f:49:7c:4d:16:ba:3d:cd:c5:a4:
b9:e7:c3:db:26:89:4a:06:67:b1:7c:84:14:da:57:
60:78:b2:64:c8:b1:86:02:16:5f:bc:af:39:56:75:
10:c0:32:b7:82:8d:f8:56:53:a8:b3:ac:48:df:5b:
1a:91:9f:db:2c:22:b2:06:45:0a:b0:f8:e7:ba:f3:
8f:1c:b2:e5:2d:0a:82:06:d5:9e:9e:17:94:93:27:
cb:8e:3f:3b:d0:21:15:97:c9:f6:97:05:1a:4a:f2:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2A:67:83:A1:0D:79:95:B8:8F:92:E9:3E:4E:CD:B1:30:5B:5D:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa1f6cf5-77ee-3782-b327-05f639472e78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.7.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:f8:76:a5:01:3f:cb:cb:c6:70:c2:e2:90:19:2c:bc:27:04:
18:bc:1d:09:ec:37:1d:dc:c1:8b:58:7b:0c:19:cb:8a:33:8d:
19:5c:ee:7b:5d:e3:29:05:0c:fb:88:76:f1:2d:6e:0f:e6:1c:
08:b9:79:b9:4e:25:92:b9:76:e7:9e:46:00:a0:0e:cd:9f:0e:
dc:75:27:8b:32:5e:ae:2a:be:0f:10:6a:bc:17:c7:91:38:bd:
4a:66:b7:1b:fa:58:6a:ff:6b:0c:67:c9:17:6e:79:07:b5:ff:
a1:3e:52:7d:7b:32:95:07:e9:eb:d1:de:ef:70:65:b8:f5:dc:
50:05:dd:d6:d6:11:3f:e3:10:4b:7f:ee:13:fb:ce:86:ee:5f:
c7:50:42:17:11:ec:02:25:64:ec:3b:3f:0e:34:ca:41:06:9d:
8b:75:65:3a:f8:6c:41:ea:ae:35:7e:f7:c6:6f:20:12:bb:a7:
97:8f:ea:3c:74:c7:a1:e9:d7:b4:b6:a6:ed:20:02:50:9e:6a:
a2:20:8a:75:d9:55:c8:dd:44:9d:e6:c7:76:51:c3:e5:5e:26:
ca:68:6a:63:55:6b:2f:16:89:c3:55:50:30:24:64:5a:f0:5e:
ea:ba:46:6e:4b:ef:ae:42:15:a0:68:9b:db:f0:84:c5:cd:17:
cb:40:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:46 2025 by rpki-client