Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a178e96-d37d-3ffd-9abd-52d4c597377e.roa
File: 9a178e96-d37d-3ffd-9abd-52d4c597377e.roa (raw, json)
Hash identifier: U2+pOhs6ndZr6h6tgye3uRjfoXvI0LKvvGDMAbH5x+g=
Subject key identifier: FD:BA:C9:A8:BD:6E:47:08:16:92:35:58:12:02:5B:F0:F0:1A:95:4A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584902EC1E66FF61E8BC0B545E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a178e96-d37d-3ffd-9abd-52d4c597377e.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 20940
IP address blocks: 96.7.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:1e:66:ff:61:e8:bc:0b:54:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=e1c124a8-b5bd-4173-8f29-dc23e4b7a9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:3a:9e:8d:93:b8:60:a5:c3:9e:8b:cf:1e:
dd:c4:4d:f6:ec:44:5c:48:a7:77:ff:a2:99:5f:65:
85:81:e8:9e:97:ca:ce:f0:65:0f:28:31:91:ac:6c:
a6:4d:f0:39:13:af:8a:27:c4:0e:a7:4b:36:04:a1:
89:6a:d9:af:12:ba:43:6a:db:49:ef:52:35:aa:68:
84:00:41:f9:94:d3:31:f3:f0:32:7a:d9:55:98:e2:
96:49:c1:84:6d:73:76:13:50:19:79:ff:88:16:7d:
f8:a8:aa:84:ab:86:56:b9:98:79:52:b5:03:fe:80:
12:99:56:e7:62:a1:61:ba:f3:26:57:36:32:a0:df:
57:56:d1:11:d7:67:40:a7:57:bd:b7:c8:fa:03:e5:
51:18:07:10:05:2e:0b:cf:51:4b:fa:73:e4:ec:1d:
df:74:91:e5:20:0c:cf:38:f6:5c:03:f6:d4:b5:26:
c0:d7:46:97:f2:2e:46:7b:37:02:d0:9f:f3:19:6f:
69:63:54:3a:29:a1:68:69:15:8c:b7:19:f7:30:9a:
ad:71:ea:c7:fe:88:b9:5d:6b:24:89:f2:a8:e6:72:
b2:b8:87:05:03:f6:e8:e6:88:8d:71:e9:41:e7:66:
2a:09:2a:cf:66:96:95:7c:a3:60:08:9b:0e:3d:06:
f2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BA:C9:A8:BD:6E:47:08:16:92:35:58:12:02:5B:F0:F0:1A:95:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a178e96-d37d-3ffd-9abd-52d4c597377e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.7.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:a9:23:cd:55:46:d2:16:df:14:4c:76:7a:87:a0:a1:86:99:
ff:d1:b8:6c:8f:72:f9:cf:9f:d2:db:17:9f:be:6d:b2:20:8a:
2e:34:f6:9b:a9:e2:b1:51:7a:76:b4:46:12:11:94:ae:62:b3:
bf:02:78:09:1f:69:71:40:4e:03:a5:86:ae:4c:b5:2c:16:f1:
53:70:20:55:67:cd:f1:58:f0:79:51:22:83:42:33:81:83:8d:
98:28:83:95:eb:b0:f2:c5:68:2e:f9:22:84:b7:05:89:0c:f9:
a2:a8:3f:08:36:84:d5:e1:f1:e5:b7:42:06:04:dd:93:34:d1:
e1:b3:1c:00:1c:ff:12:c0:c2:2f:fd:4c:e7:c9:f4:f0:47:40:
b5:66:50:9d:d1:b4:43:5f:f4:22:fc:3e:62:8d:9c:60:e1:c2:
e2:3d:6b:45:b0:f9:e5:e7:96:4c:e3:53:0d:fb:8f:36:82:02:
e7:b0:07:c4:60:39:6f:41:c7:6b:db:2a:69:8f:a2:e1:3d:ad:
15:8f:78:23:a2:3c:3c:fe:11:1f:68:a4:49:bd:7b:31:c0:93:
85:84:42:bd:bd:1a:75:bf:17:ee:ff:9a:64:8e:09:35:b6:f7:
e2:ac:e0:bc:15:bf:4e:5c:3a:8c:25:46:47:6d:a1:22:46:55:
5a:82:a0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:54 2025 by rpki-client