Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfa2ace2-3d56-31a3-845e-eefbc5f57f0a.roa
File: bfa2ace2-3d56-31a3-845e-eefbc5f57f0a.roa (raw, json)
Hash identifier: Zzo76iOZc7RJNYOJjYa3nQt9yiA1KQhnwucQuF9qmDc=
Subject key identifier: DD:AD:BD:50:71:5D:52:FE:4E:D9:45:FF:25:23:5C:F8:E1:EC:BF:8D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF5726F2784D27C74777880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfa2ace2-3d56-31a3-845e-eefbc5f57f0a.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 96.17.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:72:6f:27:84:d2:7c:74:77:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=1d61b299-ffeb-4968-8f83-499daffa0fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2c:38:11:81:96:2b:8c:32:48:e5:43:de:41:
75:f3:66:ea:1b:42:d6:7a:e7:f1:c7:f1:63:3c:23:
32:04:8b:bc:e5:b3:87:63:94:78:2d:b4:f8:61:2e:
b3:a5:58:24:3f:9e:40:df:04:6d:ee:2c:f4:a0:6c:
dd:dc:52:b5:ee:d0:75:be:bb:5c:df:e7:8f:8a:f7:
5e:9a:c9:eb:a8:76:cb:db:a6:41:9f:0e:58:dd:10:
5c:ea:22:c5:2a:90:f4:9a:4d:9e:8b:48:f9:6a:47:
6b:11:d9:5c:f4:c6:16:c0:bf:da:29:c8:5a:be:33:
7c:6f:8b:15:6f:56:45:a7:f3:e8:cb:4c:b7:45:49:
8b:22:a6:29:2e:c6:c6:0b:22:b3:15:ad:02:7f:04:
6d:fc:2b:21:bb:28:dc:44:9a:48:1e:4d:dd:8e:83:
36:f2:0f:a5:db:3f:2b:a4:ba:2c:9a:8a:e2:14:61:
d4:23:85:c4:47:8f:71:06:b7:6f:3e:09:85:b2:29:
87:c6:51:10:ac:d8:e5:96:43:8e:c6:98:dc:e8:fd:
d9:67:cc:a8:6d:80:1d:f2:de:bf:74:25:bb:2e:e3:
a1:75:17:68:db:7b:ca:b3:41:01:9e:42:1b:d7:80:
de:db:0f:0c:cf:0c:27:84:73:1a:5d:be:9e:fb:43:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AD:BD:50:71:5D:52:FE:4E:D9:45:FF:25:23:5C:F8:E1:EC:BF:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfa2ace2-3d56-31a3-845e-eefbc5f57f0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.17.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:3e:9d:6d:ac:44:3b:70:37:db:54:3f:db:a1:55:06:a4:51:
ef:fa:bf:76:0c:e0:5c:db:29:9d:e9:0e:63:a7:21:58:29:ab:
91:b0:17:e4:9c:a6:99:2f:4b:ef:59:4f:49:a6:06:2f:d8:bb:
a1:e1:28:23:b7:d0:33:44:cd:54:e6:88:98:39:dc:13:7c:a1:
d5:20:30:75:33:19:71:8b:d5:92:f5:c6:35:d2:a9:a2:90:e4:
d5:80:e3:03:5d:40:51:45:c9:91:24:40:90:72:83:c7:47:e0:
35:b2:72:1a:ce:8c:00:98:f0:b9:68:ed:50:c6:fe:f9:47:1f:
d6:43:29:fe:08:31:84:81:b2:17:a4:2f:a2:a6:7a:dc:64:ec:
9c:dd:bd:82:b2:18:89:ef:ce:79:8b:c7:29:b8:c5:94:48:bc:
8a:0d:2b:a9:4d:c3:00:ae:47:0f:da:2a:53:7a:5f:b1:c7:ba:
5e:51:d8:37:bb:c5:63:c6:94:fd:57:6f:89:a2:d7:61:46:7d:
d2:ed:88:f8:15:c0:02:2c:e9:2c:d1:fb:37:d0:df:5c:7c:23:
e7:f4:4d:08:e2:fc:be:78:c3:e8:96:8d:e6:a4:96:65:b8:a5:
1a:09:86:81:f1:48:2a:ac:bf:12:6a:a2:a2:55:ed:c3:e8:3c:
c7:5e:38:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:19 2025 by rpki-client