Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec0f546a-3217-314f-9299-4f9f7bc89340.roa
File: ec0f546a-3217-314f-9299-4f9f7bc89340.roa (raw, json)
Hash identifier: TRBgRbt5PKdRDpQBR+/FNJ0swINdV7RMFFHeiX9INlw=
Subject key identifier: E5:D7:98:95:D9:7B:BB:45:5A:95:7E:EC:16:FF:6E:65:49:AE:85:89
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858490B4C39007805A5F3310CED40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec0f546a-3217-314f-9299-4f9f7bc89340.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 20940
IP address blocks: 96.17.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:39:00:78:05:a5:f3:31:0c:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=5e4778ad-96ec-40a8-92ef-c4bfecfb4692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:04:01:d3:cb:b8:db:30:9f:c5:6a:6b:bf:
4f:03:2e:ed:02:87:a9:27:86:01:5c:8a:36:51:9e:
42:42:51:d1:11:12:19:f7:e2:0d:e5:60:3b:7c:91:
86:e7:d7:3f:ac:85:bb:a6:ec:65:d4:39:76:d7:a2:
8e:25:1c:22:33:6e:05:06:eb:41:33:db:36:f2:e0:
44:9d:24:91:fe:4f:27:ef:15:fe:40:8b:b1:05:04:
8c:64:af:47:11:3f:d4:bb:23:e3:c1:75:03:b3:81:
29:d4:54:a5:f7:5a:e7:fd:e6:9a:fa:04:e3:ac:3d:
4f:3a:19:4b:6d:ac:dc:83:e7:cf:a7:88:15:f0:fb:
a6:b2:99:e7:ec:c4:2d:73:17:8f:a8:d2:d0:7c:f8:
5c:e3:7c:20:cc:08:a0:96:31:2c:61:1b:a0:87:34:
2a:d5:ea:9d:9d:d0:6f:f9:78:c6:e8:57:ec:48:c6:
ee:01:78:6c:cd:fb:75:7c:e4:19:d3:04:9d:fc:e7:
69:7a:90:ba:08:41:01:a5:d8:a1:44:7c:22:9d:91:
89:86:d0:3c:38:03:5d:ba:98:46:e0:5d:0e:b1:25:
ae:38:06:e5:b9:9f:6a:04:92:c1:54:8e:ee:21:13:
98:8e:ff:c1:dc:da:df:9f:43:83:e0:f7:e3:f0:1d:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D7:98:95:D9:7B:BB:45:5A:95:7E:EC:16:FF:6E:65:49:AE:85:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec0f546a-3217-314f-9299-4f9f7bc89340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.17.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:4c:d5:7b:a8:13:90:bf:e1:9f:d0:1c:d3:54:ac:68:0d:79:
a3:77:3b:aa:92:35:3d:04:49:8e:f9:b9:a8:4b:4d:be:c0:4d:
4b:76:47:3c:4f:d1:88:29:2e:4e:60:73:cc:df:79:76:06:3c:
1a:44:3b:a1:c2:4b:48:8d:68:5e:d5:3d:c4:06:e9:82:37:89:
70:ce:bf:bc:a5:1c:58:b9:c3:cc:5b:43:35:0d:04:bd:1f:2b:
a3:cf:c6:81:87:28:5d:85:b4:85:18:7b:ae:84:c1:11:66:80:
20:fa:de:8c:e4:52:3e:2e:40:24:11:52:c2:9c:64:b1:2b:99:
44:be:49:a2:53:ba:46:a1:49:f6:2b:f4:71:ba:bb:8e:23:03:
e0:d2:7a:d1:9c:eb:11:28:e4:58:8d:ad:96:d4:be:9d:7f:f6:
fe:c5:06:78:41:70:b6:5a:05:50:ac:f6:b7:b7:ca:b9:d8:e2:
30:e5:82:52:81:2b:96:11:e0:7e:f8:34:32:25:0f:a7:c6:94:
93:d7:22:04:b6:a6:e0:00:21:9f:81:dd:10:40:26:1d:ab:7d:
4f:0d:a9:02:6b:ac:84:ae:15:63:e1:78:99:2b:5d:5b:cc:47:
43:52:1a:db:5b:b3:13:95:e0:24:d3:9a:34:c6:56:fe:f9:28:
43:f5:6a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:24:07 2025 by rpki-client