Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1092ed51-9f14-3ebb-8463-c759a5546a52.roa
File: 1092ed51-9f14-3ebb-8463-c759a5546a52.roa (raw, json)
Hash identifier: MGcfzcSenMjaRYxEorD1pxKWSs16CwhciwIN54c3BAE=
Subject key identifier: CF:3B:10:52:2B:6B:7D:51:75:C3:2F:05:7E:E4:FC:4A:3D:DC:EF:CD
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F43285849560332A7B4BFD3101D256980
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1092ed51-9f14-3ebb-8463-c759a5546a52.roa
Signing time: Fri 28 Mar 2025 08:19:47 +0000
ROA not before: Fri 28 Mar 2025 08:19:47 +0000
ROA not after: Thu 26 Jun 2025 08:19:47 +0000
asID: 20648
IP address blocks: 96.43.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:56:03:32:a7:b4:bf:d3:10:1d:25:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Mar 28 08:19:47 2025 GMT
Not After : Jun 26 08:19:47 2025 GMT
Subject: CN=387fe21b-1310-443d-9552-24beb421a322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:53:d9:12:a1:9f:05:33:e0:2e:ff:f2:46:
b9:89:e8:b3:e5:59:eb:56:ae:7e:85:61:fa:f4:ee:
aa:79:49:41:59:4c:7f:77:9d:7c:24:a5:10:8a:3f:
70:87:4e:26:b3:ca:a3:4e:eb:cf:66:c9:1c:ef:70:
f7:d0:00:6e:4e:b0:dd:36:7b:21:a5:4f:6c:b5:48:
bf:8c:5a:33:ef:86:87:66:c1:3c:e4:22:d0:2d:e4:
84:54:ab:5f:52:33:0b:e9:6d:c9:a8:94:a5:5c:e2:
ab:f1:c6:4c:47:bd:70:f6:ba:eb:ae:29:b3:24:20:
7c:92:5a:09:30:90:61:d3:54:80:b2:6a:43:84:ee:
30:a5:26:c7:40:e2:5a:c4:ee:1d:65:53:54:ff:bd:
6a:8b:e5:b0:db:43:03:65:91:a2:71:fe:76:f7:5d:
95:bf:90:97:bb:d7:62:80:3e:25:85:3c:e2:c4:88:
ac:dd:4c:09:8d:80:c6:c3:9b:83:ff:74:5c:38:9a:
b9:8e:8f:0b:62:35:b0:6b:68:55:ff:84:cf:35:38:
4e:3b:db:8d:66:1c:87:20:fb:f2:98:15:f1:e9:44:
a2:a7:50:47:61:ed:ed:83:70:8c:18:fb:78:97:a0:
01:a9:ca:a9:49:a0:63:8d:9f:07:35:a6:00:7c:0a:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3B:10:52:2B:6B:7D:51:75:C3:2F:05:7E:E4:FC:4A:3D:DC:EF:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1092ed51-9f14-3ebb-8463-c759a5546a52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
96.43.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:8c:58:da:66:d4:7a:da:3c:e4:b7:1e:d4:c3:f2:c0:62:37:
f4:88:e6:90:0d:14:fc:1c:b9:66:3b:7f:a2:d9:41:2b:fa:de:
ea:cb:50:b4:12:b4:1b:5b:96:a7:77:3b:c0:1d:f2:9b:48:e7:
88:50:5d:38:5f:9f:33:98:64:49:a7:75:36:5c:b1:0a:fe:36:
17:d7:87:9c:90:cd:e6:d5:a0:e0:92:ab:94:79:af:a2:7f:45:
56:53:80:91:ca:41:ab:9e:93:2b:32:2c:4f:06:f1:e6:58:7c:
80:3e:66:ba:58:9f:5b:a0:90:74:39:c8:55:fd:ca:ca:f3:73:
0f:c2:2e:95:d3:41:c5:3b:44:4f:f5:e5:6f:bd:7d:c7:2d:f9:
0f:1e:68:2b:96:5c:21:ae:71:c9:0a:c9:5a:7e:67:77:8f:fb:
85:1f:5e:49:67:fd:bb:41:76:a6:05:1b:3f:6f:66:af:d8:79:
69:21:14:17:87:ee:3a:0e:38:b0:69:d7:db:fa:fd:26:df:63:
45:bb:ed:b5:05:79:97:b6:3a:90:3e:19:55:82:d4:2d:d2:f0:
3b:1f:3e:df:97:a3:7e:ff:00:98:b5:83:3a:c2:73:cb:6d:13:
6b:17:b2:b8:54:6e:ad:57:f9:ef:8f:d0:f6:87:36:51:e9:01:
21:da:27:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:22 2025 by rpki-client