Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/daadc077-e440-3d91-92c8-cbd4f82a9cb6.roa
File: daadc077-e440-3d91-92c8-cbd4f82a9cb6.roa (raw, json)
Hash identifier: Sksty7oAUSRwZmxifWi7p0qS/44s07Kjvx/cx2jg+6Y=
Subject key identifier: BD:2A:B0:E8:CF:AA:DA:66:FC:D7:D7:E7:34:FC:D8:5C:1E:D8:D1:C6
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1645D88C18B0B39BC8600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/daadc077-e440-3d91-92c8-cbd4f82a9cb6.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 96.42.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:64:5d:88:c1:8b:0b:39:bc:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=df183fd8-897b-4838-927d-422fde57ce42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:67:89:cf:89:8b:49:00:43:32:e9:3c:be:7f:
89:1b:e0:50:ac:c0:d5:3f:3a:c8:18:59:46:d3:cf:
ba:e6:88:81:ba:00:c2:55:b3:d0:6f:93:fa:5d:c3:
35:e8:31:20:84:c1:b7:a6:91:cd:02:b0:64:7b:97:
b3:97:32:81:74:0c:65:ab:4d:bf:98:05:9a:84:a3:
57:a9:12:10:9e:7f:31:53:67:ba:74:8f:5d:95:8e:
6d:28:9e:d1:77:c4:90:f7:e3:62:82:fd:f6:9a:33:
7b:eb:43:f5:d0:05:5b:64:97:c6:5c:04:a4:00:82:
f7:57:ed:2c:4a:02:07:20:6a:b6:cf:94:69:e5:92:
21:fc:27:a9:76:92:11:3f:be:32:0d:78:5a:b9:a1:
1f:4a:c2:6a:8b:10:8c:6b:7e:ce:5e:9e:77:5c:a7:
55:1a:db:05:50:5c:2f:a3:b9:37:2d:98:38:5d:38:
22:a1:1d:2a:18:d1:39:46:30:8a:91:42:32:d3:3e:
41:77:4a:b6:46:d3:73:10:3f:ef:80:98:f4:06:81:
b3:ef:1c:bc:74:7a:7d:c7:0f:eb:4a:51:18:bf:ab:
05:7f:34:95:95:e0:09:ad:4f:de:03:b5:74:ae:7e:
24:25:85:4f:59:43:14:74:18:bd:e9:cf:03:ee:1f:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2A:B0:E8:CF:AA:DA:66:FC:D7:D7:E7:34:FC:D8:5C:1E:D8:D1:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/daadc077-e440-3d91-92c8-cbd4f82a9cb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
96.42.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:9a:08:3b:01:0d:a1:4c:63:0f:73:f5:14:2e:b9:82:ed:2e:
20:36:d4:32:1a:a4:93:cd:10:15:38:94:95:a6:42:90:03:f8:
bd:0a:32:8f:b1:79:10:36:90:a7:0c:e7:ce:c1:4b:15:53:d9:
bc:8e:14:8b:b9:73:2f:0a:3b:35:ff:3c:a3:d9:2e:1a:05:56:
ce:ec:ee:73:5c:73:ed:f5:4a:a7:89:49:f0:0b:df:95:61:1d:
d0:e2:4c:85:19:7a:cc:45:60:d6:ef:9b:f8:0d:a8:4a:0f:33:
d2:87:2a:f9:46:1c:85:0f:5a:1e:59:b8:a3:de:1c:66:cf:15:
6e:d8:2d:af:71:e3:d8:10:5e:51:9e:d5:37:ee:d0:d9:d7:b6:
5b:a4:7f:39:58:85:fd:2e:ca:e7:29:31:c8:ae:b0:a9:af:af:
38:44:88:1a:94:75:46:4f:28:35:e8:7b:a8:9c:9f:bd:4a:82:
06:f2:7b:50:3b:df:e6:27:38:cc:e4:3b:86:f5:ee:4d:15:d2:
96:86:5c:9e:b9:7e:f9:27:01:c8:b9:ae:31:55:48:da:78:8a:
e8:c4:0c:b9:7f:8f:c6:09:02:8d:c4:fe:34:0d:b5:22:20:81:
d8:ff:cd:34:67:45:3a:f0:7d:a4:dd:1b:0a:2e:32:5a:ac:0e:
94:54:d7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:10:49 2025 by rpki-client