Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa
File: d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa (raw, json)
Hash identifier: yaScqUoPnHyGw9PsijEW0qNq0h4MVlA4Agl5vjlyvVI=
Subject key identifier: DA:77:1B:F8:6F:51:FA:6A:FA:FB:E2:FE:57:23:91:28:E9:69:35:E4
Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
Certificate serial: 010D0C9F432858492E13BBD2D7E4FB237C629F00
Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 7311
IP address blocks: 96.125.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:bb:d2:d7:e4:fb:23:7c:62:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=32426ba6-9e70-4a95-9cc2-ce7dfee2af67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:6f:4b:35:48:fd:9e:e6:ee:22:6c:e0:cf:
90:e7:bf:f2:3b:71:91:6c:0d:be:d9:cf:b6:ec:ed:
ab:3d:46:3b:1f:4a:b4:82:d2:a5:08:2f:7d:38:e3:
da:ae:ef:07:5e:81:bf:2e:6a:b2:c9:e0:4b:ee:e6:
d2:70:ae:71:98:9b:21:06:1d:bd:34:18:f3:f8:23:
a2:28:2f:ca:cd:28:81:af:ed:14:f8:ca:f2:fe:41:
4d:39:34:25:af:b5:f0:2f:3b:b4:0e:45:89:f0:35:
72:6e:94:69:00:da:3a:89:64:70:09:3d:24:9b:df:
ba:15:0d:b2:41:af:37:28:8c:b4:ac:cc:04:4d:da:
ad:ad:49:46:60:ef:31:6d:f4:b3:44:dc:61:c7:be:
59:78:60:0a:c1:13:21:6c:dc:f8:cb:cc:14:ef:5a:
02:9f:f7:d2:a2:ec:1b:d7:a0:75:6f:31:f6:76:4b:
dd:74:7c:87:6e:1f:02:c8:5d:3b:62:42:25:b0:52:
7e:f6:50:b2:22:fe:57:5d:17:c4:8e:14:95:24:d9:
ae:89:c3:62:f2:c9:8b:ee:48:d7:d9:04:e6:d3:7e:
34:19:4d:24:32:d0:64:19:34:f8:4d:c0:81:50:44:
e7:93:c5:27:bb:0d:0f:9f:fa:36:e9:c5:37:19:6f:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:77:1B:F8:6F:51:FA:6A:FA:FB:E2:FE:57:23:91:28:E9:69:35:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl
X509v3 Authority Key Identifier:
keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
sbgp-ipAddrBlock: critical
IPv4:
96.125.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:22:c0:47:2d:57:c2:94:a9:c3:3a:e6:70:e9:a4:ce:59:38:
f0:da:5a:50:7c:54:b5:cc:7d:ce:97:14:41:1a:d3:73:ce:03:
ba:81:a3:d0:5c:67:5d:57:c5:e1:8c:df:2d:7d:8f:6b:43:41:
f8:0e:32:2c:ae:10:41:1b:27:ee:fa:cd:59:c7:b6:a4:55:fd:
32:c7:80:fb:f2:21:20:21:02:18:17:92:86:94:5f:d8:89:f4:
15:59:e8:3c:19:00:30:6b:50:ee:a5:92:ba:b0:e0:45:9b:56:
73:14:c5:90:6b:4c:7b:ee:aa:68:db:3a:6a:92:5b:45:ef:41:
e8:be:9b:3b:b5:74:ba:cf:bd:8d:90:a9:c7:f1:08:c6:cf:25:
8c:a1:17:68:b3:7d:b9:3d:8a:c6:7f:82:8d:50:7d:31:4a:21:
33:f2:eb:97:7a:71:d9:04:5b:d9:60:4b:31:52:8c:44:a2:56:
52:48:54:96:0b:87:9d:dd:d8:1f:13:c0:3a:bf:8e:35:93:3b:
84:fe:f2:a3:0e:53:3a:13:28:95:07:4e:20:31:d8:4f:a4:03:
dc:56:46:5b:cc:99:28:5d:58:cc:5b:21:40:63:51:51:7a:88:
23:fa:a2:c1:2a:4f:df:85:40:14:85:1c:d9:0d:99:15:79:b1:
39:03:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:09 2025 by rpki-client