Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/810a8aa5-9fe9-3059-9991-0b2434dc32ec.roa
File: 810a8aa5-9fe9-3059-9991-0b2434dc32ec.roa (raw, json)
Hash identifier: XDh+wxpz55OF5djuEq8+AdBMOQLv73skxi9aJ8RYDlk=
Subject key identifier: 1F:F2:1B:59:48:90:0C:D2:84:05:C5:C9:BB:77:B9:CE:9B:51:CF:C4
Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial: 010D0C9F43285848143A782685D42A6CACEC2580
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/810a8aa5-9fe9-3059-9991-0b2434dc32ec.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 393398
IP address blocks: 96.47.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:78:26:85:d4:2a:6c:ac:ec:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=46051ca7-726d-4401-b7a8-70dc7f12d698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:18:0d:39:5d:ab:76:7c:c7:e3:97:69:78:c4:
02:5e:e1:69:73:74:7d:60:64:71:de:52:c4:4c:a0:
0a:ee:ee:73:c1:ff:f2:26:10:5e:0f:cb:95:da:df:
9a:00:f3:ee:1a:76:af:a8:45:9f:ba:f2:1e:fe:26:
27:ba:ce:7a:bb:a2:7c:cc:a5:6f:5d:98:0b:61:83:
cb:50:54:82:d9:42:08:10:6a:2e:24:d8:38:0b:36:
76:1a:18:0c:06:68:fa:92:7f:a6:52:68:46:a5:af:
ce:16:1e:a7:6d:20:a7:cf:5b:09:15:6a:f7:ee:36:
a2:2e:96:6c:6f:3d:8e:cf:e9:c3:c4:28:41:75:75:
cc:b7:75:21:d8:b8:60:d4:5d:a3:43:5b:7e:f7:70:
fe:98:5b:5a:f1:dd:59:c0:6a:ca:40:b9:59:8a:4c:
c1:89:1e:d5:aa:6a:87:a2:58:32:a1:4e:9b:23:4d:
0a:75:7a:6a:61:d1:c8:e4:8b:8d:a4:f9:8d:59:1b:
4b:4e:2e:39:76:bc:81:69:33:91:33:02:83:13:2e:
a3:30:43:34:4c:26:64:6a:fa:ab:3e:2c:17:6d:6c:
4a:a8:22:31:82:60:97:1a:a7:a4:7b:68:10:5c:8b:
28:4d:dc:e0:b4:f0:61:44:4a:42:e6:b5:1f:95:ab:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F2:1B:59:48:90:0C:D2:84:05:C5:C9:BB:77:B9:CE:9B:51:CF:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/810a8aa5-9fe9-3059-9991-0b2434dc32ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
X509v3 Authority Key Identifier:
keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
sbgp-ipAddrBlock: critical
IPv4:
96.47.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:a6:d6:3d:33:a2:d0:bb:6e:f8:fb:a9:62:b2:f3:b8:ff:35:
fc:e3:24:e1:98:77:5c:da:2f:71:44:19:a8:94:4a:c3:8f:42:
12:fa:28:89:e1:d7:86:7a:ee:38:22:9d:44:4f:ad:a5:b5:77:
4d:94:ac:9a:15:87:b3:b3:45:ab:ca:a1:fa:f0:3b:c6:9b:2a:
a3:0a:7b:94:cb:0b:7d:85:13:00:84:fb:4f:c6:e6:e4:e5:d3:
3a:d0:52:63:f1:a4:08:1c:ff:bf:46:d7:a1:b1:2c:59:80:f4:
23:94:8e:86:f2:48:56:06:f4:3f:76:e4:cc:29:4c:a2:77:af:
18:94:28:29:ef:e8:72:81:1a:95:d5:25:9e:c0:0f:60:26:dd:
93:5a:64:45:b7:ca:84:c5:2e:c5:dd:a8:aa:4b:fd:8c:92:a2:
51:17:61:74:90:5b:a9:68:99:b6:85:8e:ab:c5:26:30:de:eb:
2e:9c:17:18:6f:b9:58:2b:ee:e3:4a:5f:e4:bf:13:54:09:a5:
8d:61:8c:e0:5c:cc:90:45:bc:c8:55:a5:02:78:82:96:cd:9d:
e1:83:64:e3:d7:69:01:0e:4d:ef:be:62:42:99:9f:4e:46:d5:
34:de:05:e4:9c:da:66:20:53:cc:53:0d:0b:63:ca:cb:83:92:
87:bc:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:42 2025 by rpki-client