Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa
File: ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa (raw, json)
Hash identifier: HuhUKTju6EF3lnKY2lGlfJb0OhiW9HCAgjQMcuBULuE=
Subject key identifier: 8D:DD:3A:C9:94:6B:F3:89:3D:86:FC:62:0C:9E:39:8E:C7:E2:68:B7
Certificate issuer: /CN=41025fc8-e6c8-4422-acea-8126840c20bb
Certificate serial: 010D0C9F432858481C9A82BC0C5746EF93975800
Authority key identifier: C0:34:EA:77:A6:A5:DF:C1:6A:A0:D9:2B:83:12:84:40:E0:38:E7:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 14574
IP address blocks: 216.176.96.0/19 maxlen: 24
2607:a700::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:82:bc:0c:57:46:ef:93:97:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41025fc8-e6c8-4422-acea-8126840c20bb
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=9b0c524f-9e48-4b25-ba5f-9d60a41eda7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:b7:c1:13:d4:a7:73:2c:62:01:4f:be:eb:
3c:c3:8e:6d:19:bb:8c:66:07:b5:55:2a:52:58:ea:
25:27:64:f3:e0:78:9c:d9:a9:3c:c1:5c:d8:ed:ba:
0c:77:e7:95:0b:50:de:e0:c2:39:05:f9:17:05:4e:
de:a4:0f:73:ef:89:e6:f6:f9:35:a7:8a:25:1a:8e:
d9:3d:6c:e3:ec:d3:54:82:ac:d5:90:5a:85:41:fa:
a1:f8:91:ff:f5:07:7e:a1:4b:01:eb:fd:68:72:6b:
30:39:79:68:6a:9d:ed:f6:e9:59:86:91:be:2c:62:
1d:0f:f7:c2:de:96:ea:d0:49:e8:c0:34:fa:5d:d7:
03:55:0f:33:88:a5:bd:40:cb:10:39:e2:65:f6:8a:
03:81:8f:d5:45:d2:da:d6:89:c1:ec:ff:de:c1:12:
6e:7f:ad:4e:51:d6:30:81:a6:a6:b0:ca:04:9e:5c:
e6:7c:6e:26:f5:90:f8:65:68:f6:02:46:6e:09:f3:
d1:05:e2:78:40:a1:b8:bb:5d:60:04:b0:3c:a2:9f:
39:f7:08:45:4d:c5:9f:5a:03:78:e0:72:94:9f:30:
2d:bf:39:20:f8:f1:65:a2:29:cd:bf:10:ac:fb:16:
e5:c4:17:09:3e:59:ab:d9:72:5d:66:26:1e:1e:19:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DD:3A:C9:94:6B:F3:89:3D:86:FC:62:0C:9E:39:8E:C7:E2:68:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.crl
X509v3 Authority Key Identifier:
keyid:C0:34:EA:77:A6:A5:DF:C1:6A:A0:D9:2B:83:12:84:40:E0:38:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.176.96.0/19
IPv6:
2607:a700::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:61:6c:9f:fd:f6:d9:6a:76:89:69:af:49:e9:15:58:f3:3f:
e7:29:f2:86:97:ca:b4:57:b5:53:bb:71:ff:73:70:4d:d4:81:
0b:4e:c6:52:8f:53:18:df:6e:5b:49:13:2e:03:5f:71:e0:83:
58:30:e9:74:55:10:2f:ff:1a:6a:42:ad:d9:af:6a:f2:7c:ff:
76:25:96:e3:05:19:67:64:80:5a:84:9e:00:f3:12:04:b5:39:
f1:86:82:dc:3b:77:ae:7e:2e:fb:a5:36:18:39:18:80:78:54:
5f:e0:a7:d8:cd:9a:34:b9:56:f8:9a:aa:e5:5f:e7:d3:cd:85:
37:2d:16:07:70:10:cf:cf:37:39:51:c5:6d:2c:aa:9a:58:4d:
d7:5e:75:0b:a5:d1:e0:27:18:c0:74:5c:e2:8c:e6:f2:41:03:
7b:aa:70:4b:33:7d:6c:7c:cb:07:f2:3b:f6:db:f2:32:69:4c:
5b:2b:9b:cd:cc:68:57:a2:a6:89:32:ba:34:23:59:83:2c:29:
38:1c:99:af:b2:7d:fd:45:23:4d:6a:15:d6:de:ee:27:31:ac:
b6:2a:2f:c0:9b:1d:4f:1d:ee:f6:45:4c:3a:09:76:49:fd:e2:
1a:4a:19:72:8e:07:d6:2f:10:d5:43:5a:1f:41:ee:f0:b2:29:
16:48:7f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:54 2025 by rpki-client