Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa
File: 5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa (raw, json)
Hash identifier: t5mZvBGcx0JiX993ZNvPXSkY6CX/3gSJA926oIN4aMI=
Subject key identifier: 92:43:F7:A8:B0:8B:D7:36:DF:BA:63:C1:89:AA:9B:11:E4:AB:70:B3
Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial: 010D0C9F432858481C9A7E13F71B4B5BE392AEE0
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 393398
IP address blocks: 96.47.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:7e:13:f7:1b:4b:5b:e3:92:ae:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=d8fc149c-c600-4127-bff0-c5b305ba8c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4e:36:51:21:3b:a6:86:f5:12:88:9f:27:33:
4d:d5:7d:ed:87:58:4b:14:c1:8d:87:1c:93:b8:f9:
84:5f:f9:01:77:2c:51:93:6a:f7:1a:5f:21:0e:3f:
96:14:33:56:30:03:d9:e5:9c:eb:6a:5a:6e:41:04:
b8:e3:9f:95:c8:1e:4c:30:1a:e6:5f:ae:f8:ad:0d:
3b:ea:34:7a:3d:b3:f5:48:62:a4:10:5b:ea:84:ed:
ca:41:9f:9d:bb:c5:3a:06:20:23:4c:64:4e:36:b0:
52:7a:0c:ea:29:c8:11:02:7e:59:b4:66:e9:33:f4:
31:53:53:aa:e0:10:f7:84:6c:e3:92:09:bd:40:a4:
6c:d9:66:a6:cc:02:eb:13:36:21:64:14:87:13:22:
f6:bf:1a:05:ae:63:ef:ad:ac:22:7e:59:af:11:43:
03:41:00:dc:8a:32:8b:5e:fc:55:ea:74:80:11:ae:
1d:a2:cf:98:cb:ee:17:92:04:64:28:4c:aa:93:18:
1c:f1:18:d5:75:d3:45:12:ba:d3:84:ce:26:59:88:
fe:01:4c:96:4c:1c:2d:4c:e0:28:9b:c7:60:d6:2d:
57:5e:ef:a2:81:2d:78:93:60:66:1e:47:7a:99:d8:
ba:01:72:48:88:d9:48:e7:34:21:3b:9e:ca:97:e0:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:43:F7:A8:B0:8B:D7:36:DF:BA:63:C1:89:AA:9B:11:E4:AB:70:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
X509v3 Authority Key Identifier:
keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
sbgp-ipAddrBlock: critical
IPv4:
96.47.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:4c:88:be:10:d9:38:b2:e1:19:6b:7f:2a:44:d0:15:fd:bf:
fb:21:4e:3c:07:c7:5a:c6:33:14:01:7c:e8:bf:91:3b:a7:10:
46:fe:28:6f:95:2e:84:47:19:43:60:f7:c4:34:15:90:c6:f4:
d7:ad:3f:f7:1e:79:5b:53:a5:10:0d:2d:d9:89:f4:5a:04:9a:
86:97:27:f5:b4:45:7d:b4:0c:63:91:90:37:79:16:ca:8c:e6:
c2:9f:ea:f9:03:e7:00:7e:8f:76:23:1c:2c:23:f0:e1:42:a4:
34:09:74:21:bb:1f:81:d3:bd:c7:92:c5:6a:8e:17:e4:e0:31:
90:5e:5f:58:37:95:36:37:91:dc:76:73:e5:eb:12:a2:3a:ec:
c7:c8:b7:5a:d7:26:9d:3c:71:dc:de:e1:71:9f:67:06:71:ac:
11:20:26:38:10:2e:b6:56:13:e2:1d:21:31:1d:fe:1c:ca:6a:
06:08:d8:26:b9:0e:17:79:82:a5:7c:d0:34:34:e5:d0:17:bf:
83:2e:d6:69:77:9f:35:c6:e3:44:26:51:34:2e:d0:8b:f2:66:
c8:7a:90:37:57:7d:86:25:29:75:95:9c:b2:20:e0:85:71:c6:
c1:2b:00:73:34:76:55:ed:56:92:3f:ac:64:72:44:19:9b:12:
51:bc:85:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:22:49 2025 by rpki-client