Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d5941e9-c0f3-3a8e-aa3f-cc5cd6f96511.roa
File: 9d5941e9-c0f3-3a8e-aa3f-cc5cd6f96511.roa (raw, json)
Hash identifier: 5p4a7Hyha7u6m6qvbscSrf+S/kMWoE+SVRs9EEwoMB8=
Subject key identifier: 43:5C:86:B9:34:C0:28:11:3D:F7:A8:F7:AA:0B:43:33:3C:07:49:7B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C2BFEE69792F61F83F000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d5941e9-c0f3-3a8e-aa3f-cc5cd6f96511.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 96.225.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:2b:fe:e6:97:92:f6:1f:83:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=dab276f5-7244-4a55-9ab5-1eeb1731eb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a2:19:b6:af:1d:7d:29:07:2d:40:49:76:c0:
4c:50:2e:ab:56:db:8d:f3:a5:28:60:c1:1e:94:7a:
74:ff:48:ed:af:f2:2a:4d:0a:46:0d:e1:5f:93:e1:
dc:7e:49:bd:fa:ef:6c:8d:ae:da:a2:10:66:6b:b6:
4b:e1:46:a5:46:cb:98:31:de:89:c0:71:12:46:27:
4b:8f:5b:93:6a:c4:60:44:1b:b2:db:71:df:7f:1a:
3f:25:2a:05:a8:13:d6:f7:7e:55:b9:29:e7:c5:ef:
1b:74:96:05:f3:67:47:29:b9:78:51:f4:1e:4f:ea:
56:97:5f:39:80:13:8c:7b:ca:72:aa:2b:0a:bb:e2:
e3:06:c9:d4:80:b5:6a:54:b2:c0:99:c4:4e:79:e1:
d0:10:a4:15:93:e4:58:a2:14:99:15:06:0c:f7:09:
e3:cf:ff:91:02:a8:e6:13:9b:51:61:2d:86:f1:0a:
3a:09:0f:82:05:a5:6e:4e:a4:2e:29:0d:a1:3e:29:
c1:20:e0:2b:4a:81:ad:b5:00:0c:5f:49:e8:70:11:
89:83:56:32:b6:8c:2f:c3:f0:60:32:b1:72:33:e8:
1d:df:b9:62:dc:7e:04:e3:57:5f:36:49:66:6e:ce:
3f:4e:76:50:48:16:70:6f:ee:82:c6:13:c2:1e:77:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5C:86:B9:34:C0:28:11:3D:F7:A8:F7:AA:0B:43:33:3C:07:49:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d5941e9-c0f3-3a8e-aa3f-cc5cd6f96511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.225.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:de:3a:3c:d4:9d:71:36:90:37:94:63:19:d3:60:b5:00:1d:
41:bd:93:f4:44:6d:ba:8d:22:3a:1a:58:48:64:77:a0:3a:42:
f8:c0:28:78:42:07:93:6b:3b:37:7d:46:63:41:97:3d:57:3d:
f5:1d:a6:ae:98:ec:a1:70:7d:67:e0:1f:aa:e3:71:1c:83:83:
8a:d3:af:18:d2:b7:8a:a5:52:08:53:d3:e6:68:15:1b:f0:e4:
53:bd:96:37:4d:e9:1c:49:7d:ce:bb:c1:92:82:00:ae:6f:27:
d8:68:51:e3:bd:0e:d7:ce:99:7e:e8:b8:27:98:9a:ee:a2:cd:
24:d1:38:3a:dd:0d:6c:0e:cd:d5:89:26:a6:4e:5b:6b:9a:2c:
7d:6a:ea:39:3a:98:c3:8c:0e:0b:c6:7d:57:8a:80:14:cb:98:
d3:29:75:fb:d3:01:e6:f6:6a:59:b6:4d:e2:f3:5c:49:d7:42:
65:6b:e0:2e:e6:24:5e:05:9c:27:f6:2c:6b:06:22:38:2d:3c:
ed:3f:30:16:a6:06:a4:c3:2a:a7:e5:79:4c:61:ec:e5:5f:fc:
f8:c6:51:d0:b2:6d:9f:1e:4b:a0:52:a7:e6:da:36:b0:2c:e2:
60:75:05:28:1e:47:1c:02:a9:44:49:2a:a3:f3:ce:c6:98:26:
49:4f:75:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:39:42 2025 by rpki-client