Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/24f59a58-30b4-31fd-bd73-80bfede75809.roa
File: 24f59a58-30b4-31fd-bd73-80bfede75809.roa (raw, json)
Hash identifier: EfoZSNUyT1JZ6ay/+m+vKH8/KVLInHeBU1svEigzPVo=
Subject key identifier: 46:9A:E5:77:E0:8A:D5:DE:25:B2:34:5B:8E:B8:67:64:AB:A3:AB:FD
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F43285848B8F0CC1EFC2C47DD4AEFE280
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/24f59a58-30b4-31fd-bd73-80bfede75809.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 40434
IP address blocks: 96.3.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:cc:1e:fc:2c:47:dd:4a:ef:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=1e04b78f-365d-4a45-b99b-07a3dfcc90c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c7:c7:1a:1b:78:5f:9a:6b:01:ec:f5:fe:4c:
be:61:d1:5a:21:7d:b8:25:fc:bd:99:29:21:a3:57:
19:e9:ac:70:94:7f:f0:02:b0:94:6e:c4:a4:4f:86:
06:a2:35:56:5b:3f:bc:ba:ba:29:8e:14:60:a8:59:
5a:ea:24:90:be:f8:a0:5d:f7:ab:45:45:14:c4:7a:
f8:97:aa:f3:5c:c6:f4:ad:7a:6d:0f:be:2f:55:6f:
3d:c6:48:7c:54:cd:b2:f8:84:5f:ca:bb:94:d9:99:
5d:1b:29:88:e9:1f:af:42:b9:54:2a:9d:0a:f3:0d:
81:79:42:50:0c:fa:6d:ae:8c:9a:34:aa:fc:41:7f:
ba:14:d3:bd:39:29:41:74:80:a5:ff:1d:e2:e0:f1:
da:7c:2b:5b:86:08:f4:2e:fe:64:2d:63:b2:68:15:
ae:f2:9e:b3:3d:38:51:b4:71:fc:69:4a:f3:b5:75:
ba:6e:84:81:df:e6:75:a2:da:cd:f7:22:61:38:e1:
3d:7a:c5:d9:94:92:9e:41:81:ab:03:18:70:a2:03:
e0:61:b7:7b:1a:70:00:b7:77:ed:c0:02:31:7b:39:
59:d8:40:98:e8:66:09:27:18:de:08:fe:9e:6a:76:
0e:88:fa:ef:f6:93:76:74:f2:c8:ac:b3:69:ff:e7:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9A:E5:77:E0:8A:D5:DE:25:B2:34:5B:8E:B8:67:64:AB:A3:AB:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/24f59a58-30b4-31fd-bd73-80bfede75809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
96.3.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:87:ff:31:61:b7:89:3f:77:1b:48:2f:5a:05:ac:97:54:f7:
38:5c:b1:6d:68:44:53:e0:a6:a1:8d:76:61:84:88:22:e3:a8:
e1:f2:7f:4b:cf:cc:89:c7:ed:38:ff:90:56:1d:b0:cd:ff:33:
8b:c4:26:62:e8:38:1d:1c:b7:fb:77:e2:2a:f0:5a:c3:a0:13:
1f:5d:4a:1e:14:e0:6f:d1:d9:99:45:f0:0c:8f:6e:8e:31:23:
a4:50:46:ad:6b:05:e0:b9:83:bf:20:60:97:5a:04:c1:52:82:
18:fb:95:00:73:4f:24:30:7f:ac:c5:a4:34:3f:a5:d9:95:49:
8e:ab:03:63:db:85:6d:63:ad:cd:68:11:5b:7d:db:d0:fb:7a:
9b:65:46:1e:c5:e0:4d:42:29:a2:ae:2f:72:dc:18:1f:ff:e0:
75:80:59:cd:52:b9:ae:1b:69:55:1a:31:4b:ad:7c:08:9e:91:
ba:9c:49:2c:59:f8:16:05:7e:cc:41:2b:bb:ba:df:53:1b:e5:
07:09:21:64:eb:6c:70:a0:2c:c5:8f:d6:ae:d3:50:bd:d0:ec:
e4:a8:07:3b:ad:61:bc:d4:2e:6b:ea:30:ae:47:e1:f9:2d:25:
66:26:00:21:fe:84:02:8a:86:7f:56:7d:c1:eb:38:ad:e7:57:
2c:80:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:23 2025 by rpki-client