Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d43b375b-1b64-324f-b13d-2aa19d4fd4d8.roa
File: d43b375b-1b64-324f-b13d-2aa19d4fd4d8.roa (raw, json)
Hash identifier: cd5nIW5JYJDJxaX7TGEH38E42q0xL53/azDLZAv3KH0=
Subject key identifier: FA:4C:60:21:89:31:CF:5D:8C:31:89:1B:1C:42:46:C7:76:93:B1:3E
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F432858484515919E06C36B205A47D240
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d43b375b-1b64-324f-b13d-2aa19d4fd4d8.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 63363
IP address blocks: 64.96.5.0/24 maxlen: 24
2620:57:4005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:91:9e:06:c3:6b:20:5a:47:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=d921f2eb-8ede-46d5-a662-476df5d0e66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:e9:c0:aa:d7:03:52:dc:9a:1a:c1:c8:9e:
b2:7f:ae:14:5e:99:7e:9a:ef:ea:66:b6:83:ab:4f:
d5:15:d1:d9:07:b3:5c:84:94:18:b6:02:a6:d1:b2:
4a:fd:8e:b1:ce:27:4e:9e:44:e7:91:ab:78:93:25:
b9:52:2e:34:79:dd:b7:cf:45:ce:2c:20:06:ba:a7:
b6:ac:bb:2c:e1:23:45:0a:05:61:8c:90:e6:27:19:
53:b8:75:7e:91:86:d6:d5:b9:d3:ed:b0:70:98:f2:
7a:c4:cf:04:40:ea:09:67:3b:02:f1:93:36:3d:26:
5a:7e:e2:29:b9:7b:fd:4e:ef:c8:79:37:ab:c8:fe:
2c:dd:a8:40:88:fd:43:0f:83:00:00:ec:84:63:a9:
ae:2f:35:76:16:84:82:20:4b:1b:02:7b:b6:6c:36:
06:91:f5:fc:57:2d:c3:ec:4d:0a:6a:7b:b0:f5:15:
49:2c:42:37:3e:c9:28:d4:d0:80:d4:27:66:7c:cb:
88:0d:7e:ab:37:30:30:a4:a1:7a:6e:95:a0:fe:a5:
f6:2d:39:70:1f:21:1e:e7:ee:e9:ac:d5:de:5d:2a:
bb:d5:6d:bb:b8:76:0e:9c:61:e0:b9:55:c0:21:41:
d8:5b:10:2c:21:cd:68:df:d3:a5:63:31:d2:24:fd:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4C:60:21:89:31:CF:5D:8C:31:89:1B:1C:42:46:C7:76:93:B1:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d43b375b-1b64-324f-b13d-2aa19d4fd4d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.96.5.0/24
IPv6:
2620:57:4005::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:39:bc:1e:0b:77:79:aa:85:8c:68:48:b8:70:9d:59:8c:f3:
16:89:97:13:17:7d:81:9a:a3:42:80:4c:e4:f2:bf:d7:53:e6:
b3:39:28:bd:b5:81:01:9e:4b:2c:1b:60:02:0a:3d:c9:31:72:
3a:50:a1:c4:5e:03:24:47:28:3a:13:55:18:af:81:89:8b:5f:
d9:42:c9:ea:ce:db:34:cf:2f:a0:75:20:6b:c6:22:a0:1b:3d:
8b:93:19:87:47:1e:81:cf:d9:c2:81:41:76:b5:ae:ca:23:28:
9b:7e:ac:4f:2e:97:ae:0b:d9:c6:e0:6c:ce:ce:5c:c7:41:f2:
ee:24:ea:72:12:0b:4f:c1:14:e8:5d:56:9f:17:0b:b2:65:13:
48:1b:e6:62:91:89:cb:3c:58:2c:00:05:6c:1f:88:47:d3:e5:
6f:b7:30:27:6b:0c:6b:35:69:c8:9a:a4:8e:3b:19:af:4e:65:
89:5d:c8:71:70:75:3a:53:5f:15:4b:51:fd:a7:62:8b:04:e0:
24:e5:55:9f:e8:df:59:5c:37:c3:e0:58:48:6c:ee:b4:1a:f5:
d4:1c:22:1a:e9:a2:84:56:b1:03:a8:44:32:b1:d7:f9:58:df:
db:47:9b:4b:96:48:c8:9d:e4:9b:55:7a:73:e7:47:79:96:72:
98:f4:a3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:42 2025 by rpki-client