Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6177cb1-3b06-307c-8e0d-71d12a8d3e02.roa
File: c6177cb1-3b06-307c-8e0d-71d12a8d3e02.roa (raw, json)
Hash identifier: 3FyTWt58SdPTQ7vzz3MAWCRaygar453NdPf5eEkNkB8=
Subject key identifier: 88:56:60:98:FF:79:9D:5F:27:FD:83:78:8F:87:F7:66:DD:27:15:D6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858490B4C39E1F7FEA3B0F80D3600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6177cb1-3b06-307c-8e0d-71d12a8d3e02.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 45758
IP address blocks: 96.17.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:39:e1:f7:fe:a3:b0:f8:0d:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=c29846b8-912c-490a-9049-2b4846b65e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:19:ac:9a:92:45:90:d0:a0:60:31:03:01:
a7:a5:cb:64:50:de:b7:45:b6:9e:a1:6d:68:7c:ec:
33:2d:ea:0b:14:34:2e:07:42:ca:a8:65:14:84:04:
df:d5:a9:b7:e1:7d:c1:94:73:f4:f7:b2:ba:14:cb:
2b:d5:0e:19:f1:18:14:48:58:76:2a:03:2f:a4:73:
ce:1f:f8:2f:b8:a3:d4:89:63:7f:9a:f4:3a:12:68:
87:26:c0:9f:55:4d:b1:87:6f:00:09:89:0d:1f:bd:
59:cf:aa:cc:60:98:10:7e:e1:7b:5c:f3:c1:d3:fc:
c7:e6:74:0a:74:11:d5:83:4a:65:7f:6c:9f:fc:f7:
58:c2:23:e3:1f:61:e5:0d:2c:19:ce:ca:e2:e3:f1:
f8:47:13:9a:2b:e8:42:d4:07:94:d9:04:e4:58:43:
2d:79:68:c2:6f:f4:c6:52:ea:4f:94:d4:5a:5a:c1:
56:93:bc:68:3c:01:b6:91:7b:0f:f6:69:e7:fc:54:
17:0c:73:26:90:bf:e5:e8:75:ca:9c:30:14:2c:88:
05:1a:eb:aa:c8:10:b0:9f:a4:a9:cb:2e:c4:22:e5:
ed:a6:d6:2c:66:03:0b:98:85:a2:18:7b:94:27:b0:
1e:49:5f:e4:66:75:b6:c0:53:42:4b:a9:d3:78:2f:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:56:60:98:FF:79:9D:5F:27:FD:83:78:8F:87:F7:66:DD:27:15:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6177cb1-3b06-307c-8e0d-71d12a8d3e02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.17.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:6f:13:28:e0:0f:09:b1:d6:b7:07:b7:47:49:11:c2:52:9e:
08:f1:7b:47:89:19:7f:68:f5:df:25:83:0b:7b:d6:31:2e:32:
f8:7c:ea:41:98:00:5a:d7:3f:77:71:ac:9b:87:0b:c0:37:fa:
a8:40:60:5d:28:f1:bd:00:7a:ef:6a:72:7a:10:b3:b6:9b:ea:
bb:11:3b:04:6c:d1:70:0e:1e:60:03:1d:eb:65:cf:2f:2d:25:
90:43:46:2d:19:6c:66:1b:82:5b:f0:86:83:b1:bb:d4:4b:3b:
c6:c6:ad:d3:39:4c:2f:5d:23:9a:cc:4a:f5:09:5f:76:64:7c:
0b:88:24:f9:83:45:30:b2:10:6c:b1:2f:d4:53:89:af:88:d5:
96:ae:68:2f:63:b8:ee:53:69:58:88:8a:4c:22:b9:a6:d6:3c:
cd:b9:ac:eb:3e:15:e6:ac:6c:4e:b5:55:45:c9:a1:2c:ce:e6:
5b:62:7b:f0:9c:48:a8:24:12:21:ec:7a:d9:bd:a5:d1:fe:7d:
dc:32:4e:8b:c6:af:df:0c:e3:40:1c:3a:15:42:cc:9d:fc:40:
d5:c2:2c:34:30:06:df:a5:9d:f9:43:47:e6:25:23:45:a3:5f:
07:76:c6:db:35:16:22:72:3a:96:8c:65:52:73:85:5a:27:ce:
4e:92:c4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:03 2025 by rpki-client