Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/8f4961bd-1c13-3519-8827-c63d49ab0683.roa
File: 8f4961bd-1c13-3519-8827-c63d49ab0683.roa (raw, json)
Hash identifier: TFvl5Q6UQQtzSw8jbExEFiVXGtQf31Zd14+7RbhWkA0=
Subject key identifier: EB:72:58:47:94:F4:95:6A:9B:75:7A:E0:19:42:88:39:EF:B3:BE:55
Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial: 010D0C9F43285848EB743F66428A3BE9E9114C00
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/8f4961bd-1c13-3519-8827-c63d49ab0683.roa
Signing time: Tue 18 Feb 2025 04:16:04 +0000
ROA not before: Tue 18 Feb 2025 04:16:04 +0000
ROA not after: Mon 19 May 2025 03:16:04 +0000
asID: 20454
IP address blocks: 96.47.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:eb:74:3f:66:42:8a:3b:e9:e9:11:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Validity
Not Before: Feb 18 04:16:04 2025 GMT
Not After : May 19 03:16:04 2025 GMT
Subject: CN=9deb61c8-f4b7-4dc9-9920-c47adc79d005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:7d:50:f1:9a:87:1c:c3:5a:64:fe:71:34:
69:4f:ba:d0:9e:cd:3c:56:d3:03:3d:02:d3:f4:59:
01:87:79:a4:cd:4c:c6:2d:ce:12:30:f3:96:6c:d6:
b0:74:4b:0d:8e:39:22:2e:f3:df:01:8f:a7:a5:e6:
7e:5b:ba:65:db:a6:31:67:f1:61:96:e0:75:75:6a:
64:98:9b:c8:30:d2:3f:10:d1:05:ad:9b:11:d2:15:
e0:13:61:15:60:aa:dd:1f:86:68:e9:cd:2e:92:40:
f8:93:a4:eb:95:88:e0:44:75:46:a1:9e:b0:07:3c:
7a:30:46:cf:e2:55:63:92:46:15:2e:af:47:87:4d:
49:9a:61:5b:bf:69:5d:7d:0e:2b:23:b9:8f:92:6b:
43:2a:29:44:d1:53:af:e5:20:a2:b8:00:25:04:35:
5f:64:57:92:75:d4:b5:3b:10:96:2f:50:31:01:33:
6a:e9:3c:08:53:1d:de:ae:3d:5d:7e:00:e6:2d:ff:
e4:60:e6:42:72:7d:74:b8:63:0e:5c:70:69:e9:0c:
57:ee:ff:02:95:d7:4a:02:14:a3:72:d4:fc:b5:cf:
5b:b2:67:34:d3:a4:09:f2:3a:a1:f4:a5:c4:27:31:
08:66:f1:a3:b3:8b:12:da:5e:ca:a9:5a:47:83:d3:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:72:58:47:94:F4:95:6A:9B:75:7A:E0:19:42:88:39:EF:B3:BE:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/8f4961bd-1c13-3519-8827-c63d49ab0683.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
X509v3 Authority Key Identifier:
keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
sbgp-ipAddrBlock: critical
IPv4:
96.47.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:dc:2c:69:a3:71:69:7e:3f:e6:e4:1c:48:c4:d8:fb:c5:ca:
12:7f:df:68:10:5e:a4:85:c6:db:33:ee:8b:77:de:5d:26:a0:
81:20:7a:8e:14:d4:57:83:d1:89:a5:5b:5a:3b:26:ba:a2:cd:
cd:93:b6:8b:e2:36:f2:ca:af:70:eb:23:81:76:fc:1e:7b:45:
1d:73:df:b9:66:01:ca:9f:0e:ca:78:a2:82:11:64:65:54:91:
23:78:aa:d8:e7:90:e8:fc:d8:74:64:29:f9:08:57:cf:67:90:
db:f1:f2:4f:8b:21:8b:07:2a:59:e1:83:4d:ea:3d:e9:b0:e3:
2c:92:19:69:58:14:0f:e8:97:78:2b:ba:61:ce:88:00:cb:bb:
00:17:fd:5c:13:b0:e0:4e:0d:3b:dc:ee:52:d3:62:1e:86:19:
7e:63:6e:c9:70:a1:e1:66:a6:ba:ba:a1:5e:b1:83:ae:2f:8a:
93:52:2f:f5:3e:97:99:3d:e5:f7:26:53:97:c8:89:1a:d0:8a:
92:9b:59:03:7b:d2:ed:05:2b:39:8e:58:45:6d:9e:ec:31:e7:
bf:d0:c3:98:a1:28:41:44:42:6a:5f:02:6b:cf:77:74:e4:b5:
2e:a3:60:83:50:df:44:dc:1d:71:50:b3:b4:8a:f6:6b:b9:b5:
b2:77:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:39 2025 by rpki-client