Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26f60a61-0177-331b-a215-a056da2d9e8c.roa
File: 26f60a61-0177-331b-a215-a056da2d9e8c.roa (raw, json)
Hash identifier: Ft8EvdkPzLId4RandyXKdJRg1Wt8MfXTkzpK6W+Wa9A=
Subject key identifier: 07:99:D9:47:91:AA:08:3C:1F:BE:9C:6E:E2:8D:E5:DA:1F:D2:8F:F1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489E6B67BECCE029B60BE62240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26f60a61-0177-331b-a215-a056da2d9e8c.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 63949
IP address blocks: 96.126.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:67:be:cc:e0:29:b6:0b:e6:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=f945a0fd-7a4c-4f38-aadb-90894f44381a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:f5:e7:03:44:0a:4d:77:2d:64:f6:17:c9:
9d:21:1d:c5:85:14:84:8e:23:d6:76:34:27:64:53:
c7:c9:5f:f4:0d:3d:23:35:7d:97:59:ae:f2:14:60:
2c:e4:9f:a2:d6:9e:3a:cd:49:0a:13:d3:b6:95:e9:
d5:39:31:e7:a0:4f:de:93:11:15:75:6e:da:f5:e5:
9f:2e:a0:1b:f2:ed:36:52:79:66:d1:f0:bb:81:49:
9d:a7:87:92:eb:bd:65:39:ef:31:77:3e:f8:37:b1:
47:51:e3:44:54:53:17:64:65:fa:75:fe:22:6f:64:
a4:d6:b0:cf:df:f5:4e:62:fb:47:cc:ac:3d:67:57:
f3:06:93:29:76:92:ae:69:6e:29:6b:2e:11:1a:38:
f0:fe:85:3b:26:43:45:f9:25:42:14:2f:aa:9a:89:
9b:b7:ec:5d:e7:23:8b:59:f7:ac:55:bd:d2:b7:f7:
77:96:e2:6c:25:e1:13:5f:28:51:40:23:57:f5:0a:
23:91:86:a0:a4:02:db:1d:69:c8:19:28:b1:bd:e1:
13:8c:1f:73:a5:24:dd:06:7d:91:5f:a2:67:df:3b:
11:a4:7c:aa:dc:9a:5d:0d:45:06:4c:7e:1a:44:12:
c3:dc:b1:f3:78:10:84:e1:91:7a:4e:cc:48:59:7e:
df:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:99:D9:47:91:AA:08:3C:1F:BE:9C:6E:E2:8D:E5:DA:1F:D2:8F:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26f60a61-0177-331b-a215-a056da2d9e8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.126.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:2d:b8:38:55:7c:3d:0e:af:5e:bf:bd:1c:8d:a3:a2:b7:d2:
bc:6a:65:99:c8:62:3a:a3:d0:3b:a0:ab:4a:43:f2:12:90:4c:
ae:a8:ff:9b:c9:4b:0a:96:a3:90:48:12:1a:69:c4:b7:ac:40:
96:39:3c:93:12:84:bf:a8:b7:d4:cf:37:20:bb:61:e8:bb:d9:
4f:18:0a:c2:ef:3d:ad:c5:13:4c:4f:42:8d:19:5c:63:30:b7:
04:9c:b5:cd:a8:a9:06:23:19:c4:1f:74:fa:93:2e:04:11:87:
19:b3:13:2a:7d:e8:63:88:c7:c9:5e:c0:69:da:02:e2:33:73:
01:a9:0f:01:81:12:49:61:4d:ad:69:a5:95:fd:6c:0f:04:42:
4e:0b:8f:94:41:3b:9f:c2:1e:a3:c9:0e:4c:8b:a7:b6:8c:d4:
17:4c:c2:4d:ab:ba:d1:6c:59:3a:30:08:8f:cf:86:9d:9a:5e:
ed:3c:9c:16:23:7a:ae:a1:fd:94:73:ce:91:50:02:c5:f5:62:
f5:c3:4a:0e:59:f6:b4:d9:e3:33:15:90:ca:41:c7:17:bb:a6:
16:18:ff:d1:2d:ac:b7:0a:52:b2:d5:89:ef:7b:20:54:8e:e9:
81:38:61:41:35:83:68:aa:41:3e:e2:3b:83:e6:3d:a9:f5:6a:
36:3c:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:12:55 2025 by rpki-client