Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2ca309db-44e8-33c3-ad6d-fdcc886a2308.roa
File: 2ca309db-44e8-33c3-ad6d-fdcc886a2308.roa (raw, json)
Hash identifier: DZH6XvEICEPSi5Sk/yo07d6PnMQgTtUdeb14DJoqxA0=
Subject key identifier: 9C:1B:A2:83:D4:DC:37:6A:83:9B:50:56:11:CC:96:E1:18:82:4C:B6
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F432858488AE09BE936ADDA61035CA500
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2ca309db-44e8-33c3-ad6d-fdcc886a2308.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 393818
IP address blocks: 64.96.1.0/24 maxlen: 24
2620:57:4001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9b:e9:36:ad:da:61:03:5c:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=867701dc-82a9-496b-8a5f-e01a9ea04c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:b9:a0:c3:5e:41:da:92:d7:5c:33:12:42:
d3:e9:f2:f8:25:95:a9:8b:e9:8d:5f:31:44:19:6b:
40:45:55:9b:37:15:66:4e:76:1b:6c:3b:dc:99:4a:
cf:93:d8:54:51:d6:4d:d6:37:b1:ef:70:df:9b:aa:
86:09:72:3e:56:b0:10:a4:e2:6d:d0:e8:09:bc:4b:
b6:52:7e:44:2f:51:ff:86:dc:5f:fd:a6:58:ad:df:
bc:6d:f8:31:76:1f:7f:49:b3:b4:d8:bb:1a:64:b2:
6c:cf:83:90:df:a8:79:b6:b1:c0:77:60:30:b1:82:
eb:b1:8a:18:ad:3f:37:7a:79:10:f2:16:3b:3d:2e:
45:62:d1:d6:2e:30:9e:60:78:82:a0:86:90:4c:1c:
e9:c1:26:ab:12:eb:c3:45:6d:eb:eb:bc:06:04:98:
0d:e4:0f:b4:2b:16:49:ff:c5:0f:14:66:af:61:d9:
82:1e:88:fb:01:89:71:f8:31:bf:d5:33:a5:3a:1e:
19:32:8a:7f:cb:34:a0:d7:f0:d3:4d:dd:e7:dc:57:
76:17:2f:0e:1c:cf:1b:2c:48:2a:2f:6c:24:ba:70:
57:96:65:39:b7:08:b0:f5:83:ea:05:0d:6b:4e:91:
a8:2d:aa:e0:55:ab:c3:8a:26:a1:4c:e1:9d:63:06:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1B:A2:83:D4:DC:37:6A:83:9B:50:56:11:CC:96:E1:18:82:4C:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2ca309db-44e8-33c3-ad6d-fdcc886a2308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.96.1.0/24
IPv6:
2620:57:4001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:47:48:08:31:56:e1:8c:b3:2b:09:05:08:ab:00:32:6d:da:
e3:46:11:82:be:87:e1:2b:b8:27:b0:d5:f5:68:8c:9c:66:80:
a1:e8:43:d4:f0:17:ca:15:e3:be:8f:97:46:bf:34:e2:01:f2:
57:15:b8:bd:b5:bc:51:62:bc:d1:09:83:91:15:54:cd:d7:e3:
cb:61:c5:e0:e9:86:c4:6a:aa:aa:8a:94:a3:80:f9:f6:6e:6e:
23:0d:a6:30:af:69:35:6a:db:b0:37:51:f0:9e:89:de:40:16:
7c:da:ff:91:e3:83:05:0e:7c:8d:02:af:03:01:92:5c:2d:81:
86:44:9e:01:58:f8:0a:7d:b1:2a:8a:8e:64:5e:43:65:df:d8:
33:5d:3f:3e:e9:2b:bf:64:92:83:99:3a:44:7e:e2:5b:8e:8f:
f7:9a:73:c3:4a:99:17:23:f2:3b:b9:b0:78:37:51:66:43:5f:
bc:c1:6c:1d:b6:d5:d3:26:2f:ed:12:8f:07:33:fa:15:5c:55:
36:3e:4b:c9:cd:66:d9:c5:6d:04:29:9b:f7:98:05:d7:84:67:
af:d2:f0:12:ab:5c:c4:4b:55:c0:aa:26:99:83:01:75:ec:61:
ef:39:f3:b7:19:60:ed:29:67:eb:21:43:92:e6:1e:b8:43:e0:
9e:53:bf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:28:52 2025 by rpki-client