Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1955f3c3-8a8e-3921-8f79-9f898e718408.roa
File: 1955f3c3-8a8e-3921-8f79-9f898e718408.roa (raw, json)
Hash identifier: 9IwAgjU5HzETGa5LKA2o2Sbk0ARzKc4aeEvPta9Hp3k=
Subject key identifier: 5D:6E:4E:6A:B8:40:62:FB:5D:B3:63:74:2C:94:94:8F:2C:41:15:FF
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F432858488815EBA2DF1260310225FE80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1955f3c3-8a8e-3921-8f79-9f898e718408.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 7018
IP address blocks: 172.96.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:eb:a2:df:12:60:31:02:25:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=14e5b1b7-357a-47b7-9a3a-3aec2d7d9223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f1:25:df:11:f7:43:53:05:54:5c:01:16:fa:
0d:09:c8:80:79:f8:fc:a3:7e:f7:4b:68:ae:c8:70:
65:11:ab:03:2e:1b:a0:0b:39:19:a9:40:c1:6a:b2:
8d:5b:67:f0:b7:85:61:5d:3a:ac:12:51:d2:98:27:
ec:d8:72:09:36:5a:20:33:f0:79:58:18:12:20:8f:
9b:48:e2:e0:d7:5e:82:65:fc:20:53:d8:39:58:f7:
d1:93:f4:74:e5:41:0d:26:60:c0:6e:1d:23:eb:85:
00:16:39:0c:3f:09:12:0d:15:b6:fa:c4:34:ca:30:
87:02:95:ce:dd:c0:18:4a:f4:9d:7e:67:55:82:da:
cb:41:a5:ae:34:f4:8b:32:a3:41:cb:f3:8c:c4:27:
37:39:a6:5a:13:99:2e:09:d9:89:24:fa:86:23:59:
5a:b6:bc:9d:ba:95:88:5c:a9:92:43:d0:69:58:c0:
64:a3:63:fb:cb:f5:47:7f:3e:ac:1d:17:20:c2:1d:
24:88:30:bd:91:d2:53:71:fc:95:e5:63:5f:7d:28:
d9:af:5c:83:a8:e9:19:f5:c6:7d:3e:73:49:fe:2c:
50:00:62:f7:f8:c6:70:71:37:96:f0:62:e1:32:d9:
39:68:e8:ad:21:67:11:f3:c0:25:f3:65:68:50:e2:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6E:4E:6A:B8:40:62:FB:5D:B3:63:74:2C:94:94:8F:2C:41:15:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1955f3c3-8a8e-3921-8f79-9f898e718408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:c1:85:1c:34:df:30:4f:78:c4:a0:7c:eb:91:a5:5e:4f:95:
ae:c6:12:0e:d2:63:84:5e:af:c7:aa:ed:8a:c6:b7:12:86:37:
1b:69:76:62:63:53:ce:f8:3c:df:1c:58:92:5d:6b:6e:ca:57:
60:db:1e:2a:96:01:e6:ed:06:1e:fb:e2:43:52:a4:b1:64:26:
63:f3:a9:6e:ba:93:8a:f5:6f:23:6c:44:39:e4:db:e6:a1:93:
29:25:a4:fd:90:68:63:e4:b9:8e:4b:80:89:a9:61:7c:23:f7:
9b:4a:b7:97:c2:ba:df:0c:63:c3:03:7e:1b:f6:69:9b:6e:2c:
ce:a7:7b:fa:7d:30:f6:65:49:80:7b:40:f7:a1:bd:b1:ee:11:
c7:8a:a6:fb:a7:9a:db:52:0a:8f:69:15:5d:a4:10:3c:ab:cc:
d2:8b:b7:28:94:3c:af:33:9b:4c:da:86:d3:ae:e4:f2:52:3e:
e2:8f:a7:60:81:dd:34:c4:80:25:30:0c:2e:b1:38:1c:1e:37:
57:24:a5:84:b7:4b:4b:a8:af:54:b7:5b:7a:c8:f4:70:20:91:
82:a0:83:c3:10:a8:76:5f:ef:7d:03:a2:a7:a8:11:1e:24:7e:
d4:1b:1f:c1:5b:3e:18:98:fd:76:bd:76:36:b3:44:a6:58:a6:
f2:75:2f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:12:59 2025 by rpki-client