Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ae235ec-014c-32c7-b3b8-803945f14e08.roa
File: 8ae235ec-014c-32c7-b3b8-803945f14e08.roa (raw, json)
Hash identifier: WCOpdaK1ec5j7d7qPeZ/ACbAz2dreA58BIcuNeEDaqA=
Subject key identifier: 96:05:DD:4A:A9:FC:58:D2:79:5B:78:E6:FD:03:39:5D:81:1F:1B:C4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858490B4C38D0C0D8D71DCE4FD780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ae235ec-014c-32c7-b3b8-803945f14e08.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 16625
IP address blocks: 96.17.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:38:d0:c0:d8:d7:1d:ce:4f:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=010fb974-4dc4-4dc5-979c-8df9e6c35a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8b:52:1e:09:e2:64:fd:fb:8a:c4:df:f8:31:
ad:7d:2d:36:74:dd:73:d8:bd:d8:d7:ba:eb:2c:e1:
ce:ce:7d:76:9a:c4:c7:a6:5d:84:86:d4:1a:37:45:
f9:1e:e8:37:8e:72:01:10:a8:62:21:aa:5e:dd:4f:
c2:d3:c1:4d:06:23:1d:c8:5d:f3:d2:90:9b:73:78:
e0:27:90:eb:a9:4e:a7:c6:23:15:84:59:9c:86:6f:
95:19:cf:cc:f7:9b:b7:72:7d:85:2d:1b:40:3c:16:
9c:13:55:01:de:2c:9d:49:40:4b:53:13:11:a3:5b:
10:5a:fd:67:13:1d:09:39:36:58:fe:d9:9c:a1:08:
2f:81:98:47:35:b2:ad:fd:d6:a6:29:55:69:f6:5e:
18:ae:ec:b8:42:9a:18:c6:f3:f9:0a:61:ab:2d:a4:
1e:5b:a9:88:18:96:fd:42:89:79:2b:95:62:83:37:
d1:40:e8:32:a8:04:09:f5:d9:06:a2:04:de:7a:4d:
12:85:bb:4b:5c:47:7a:9e:36:c0:43:91:34:b6:f7:
01:bf:e1:e0:f6:d8:24:54:5d:64:c4:8a:7f:a7:59:
45:00:f3:ae:a5:19:90:0a:f8:c8:b2:9e:ec:fe:52:
b4:b3:d0:60:58:5c:ac:39:1c:d9:2c:02:7c:b3:ff:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:05:DD:4A:A9:FC:58:D2:79:5B:78:E6:FD:03:39:5D:81:1F:1B:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ae235ec-014c-32c7-b3b8-803945f14e08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.17.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:26:6c:a8:fe:85:aa:5b:8f:31:96:2b:a2:c7:d3:78:90:9e:
26:a7:48:07:cf:bd:5e:1d:b2:83:45:dd:ac:39:c8:70:d5:b3:
9a:2b:5a:01:34:4b:c3:16:aa:95:ba:37:9c:91:c1:40:01:7c:
45:3c:03:f7:e9:c7:3b:35:02:2a:8c:40:f4:70:31:31:91:b0:
e7:34:fc:d5:2d:9a:d2:84:93:10:d2:24:04:e9:cb:dd:fc:12:
ca:1f:7c:7c:e6:00:45:eb:e2:c5:f0:df:82:8c:5f:68:0a:4a:
21:dc:c1:0c:14:41:3d:a2:7c:13:40:2d:fb:f4:23:bf:8b:e4:
0e:17:cf:87:18:80:be:38:d4:9f:3f:fa:a6:60:e0:cf:8b:ab:
c9:ee:1f:6f:51:92:c8:f8:85:bd:5c:02:a5:3e:7f:e1:c7:8b:
c0:5e:af:bc:24:59:3d:6b:e0:75:82:e1:01:48:f0:e9:09:0d:
4c:85:97:a6:64:eb:b8:3b:ec:bd:a2:a1:2e:97:c3:cb:b9:3b:
be:2a:c6:a2:56:8b:0e:e0:0c:f1:c6:cf:18:2b:16:bd:34:3c:
3f:79:1a:15:96:17:b4:77:21:f3:7c:2e:f2:29:91:93:1f:bc:
0d:37:90:a5:27:dc:a5:fd:25:7a:70:d9:c3:28:27:4c:93:22:
c0:b2:2a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:36 2025 by rpki-client