Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/aeb59863-a3d1-30da-b760-843a670437ad.roa
File: aeb59863-a3d1-30da-b760-843a670437ad.roa (raw, json)
Hash identifier: EF/UAcz4dVZwuzoIxBJI7XCKdexZZ66ZunkskBm5+g8=
Subject key identifier: B4:D3:48:82:6A:BE:13:BD:8E:6F:19:87:16:F0:18:DD:74:8A:52:66
Certificate issuer: /CN=96239d53-1062-4a21-8f97-639809abe5de
Certificate serial: 010D0C9F43285848100A7B3E6E8CCA75EC532800
Authority key identifier: D9:E0:3F:17:45:D4:86:F6:38:67:DE:31:60:C9:DD:61:C6:85:16:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/aeb59863-a3d1-30da-b760-843a670437ad.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 22933
IP address blocks: 65.255.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:7b:3e:6e:8c:ca:75:ec:53:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96239d53-1062-4a21-8f97-639809abe5de
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=d717990d-a439-460e-b346-e7143ad11919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:44:0f:ff:d5:9d:8b:a4:f5:bb:83:c0:c9:
6c:6e:9c:0f:08:c2:4a:f6:db:35:6e:a7:c9:12:de:
fc:5b:17:46:92:86:a1:7c:4a:91:9b:68:bf:0a:ab:
69:1d:7c:13:b2:af:00:6b:fe:b5:15:b6:7e:50:0b:
f1:a9:b3:a9:5f:5b:cc:91:ef:55:88:55:a3:c9:0a:
59:8f:19:c1:e6:08:89:53:b8:bc:76:be:59:55:6e:
fe:b8:78:0c:9b:ad:d1:61:92:c0:72:21:98:9a:00:
24:fb:b5:53:46:95:3e:d5:8f:ef:ff:3f:c4:5d:70:
ca:41:55:b0:6a:a5:9a:43:71:61:dd:4e:d8:76:4b:
06:33:1b:6f:cb:d8:a1:72:ee:b0:07:7c:c5:e0:bb:
89:33:95:ce:44:5c:f9:3c:96:24:98:77:bf:56:2c:
79:e6:1d:6a:55:3e:31:d8:b1:1c:34:cf:bb:d5:75:
b2:9c:bb:c1:e8:d7:4c:0d:15:24:8c:8c:27:bc:81:
3e:11:71:4c:51:41:8e:e0:a9:df:d3:3d:c2:e8:34:
03:5b:3e:7e:f8:56:10:5b:34:c0:2d:67:7e:cd:a2:
ee:4a:dc:3b:2e:30:30:c8:15:00:fb:d2:9c:89:f6:
15:76:74:b4:86:5a:b8:4d:f9:ce:1d:01:f9:80:43:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D3:48:82:6A:BE:13:BD:8E:6F:19:87:16:F0:18:DD:74:8A:52:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/aeb59863-a3d1-30da-b760-843a670437ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.crl
X509v3 Authority Key Identifier:
keyid:D9:E0:3F:17:45:D4:86:F6:38:67:DE:31:60:C9:DD:61:C6:85:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer
sbgp-ipAddrBlock: critical
IPv4:
65.255.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:d9:17:04:d9:d4:48:85:71:ef:e0:aa:a9:6b:e7:a6:52:f3:
4b:0a:d0:2e:c0:2a:e3:23:24:e7:1c:39:28:1e:b2:10:00:e5:
37:bd:f3:86:f1:a3:60:52:b6:6a:f6:ae:b9:eb:5d:2c:41:8f:
57:5d:d4:76:c4:9d:9f:99:9b:be:cd:0e:4c:90:c7:28:35:9a:
ac:c7:f8:5d:54:e3:a1:4e:f8:85:84:05:cb:9d:9d:26:a4:38:
dc:26:2e:b0:32:b7:3b:ad:16:3e:7d:fa:59:b3:67:18:7a:02:
b4:04:b8:7a:89:23:89:60:97:cc:09:73:18:8d:3f:82:f4:92:
03:2f:a2:b9:95:d4:88:e3:0b:af:18:df:c1:70:b1:20:f3:c0:
2a:7e:39:21:4e:5b:04:5a:94:b1:96:ab:f7:f3:69:6c:c3:cc:
27:ff:1f:41:b9:a2:65:00:dd:06:74:77:1f:13:16:92:82:e2:
65:42:e8:04:6d:c0:78:bc:db:e1:5b:6a:c9:6f:73:c1:99:76:
14:ab:ea:3b:df:14:cc:45:b4:36:2b:8c:f1:a9:0d:ef:15:8a:
5f:a3:0e:43:e6:8d:ae:e8:35:ea:1e:be:6e:2c:e1:4f:b1:6c:
76:9c:5a:cd:d5:5a:93:af:39:98:43:1c:5d:93:81:4b:80:0e:
7a:58:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:35:22 2025 by rpki-client