Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/45232cc2-d5ff-3a30-881e-770a37fd9fac.roa
File: 45232cc2-d5ff-3a30-881e-770a37fd9fac.roa (raw, json)
Hash identifier: eMFmhOQyYgmywYkcIfvpo8ZTM5edr9tSHkZRRxgZN8E=
Subject key identifier: C9:4F:9B:BC:F9:B5:16:C9:F5:00:DD:F5:8F:25:22:22:24:80:B1:4C
Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
Certificate serial: 010D0C9F43285848222FDC4E9C6C79E91D514500
Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/45232cc2-d5ff-3a30-881e-770a37fd9fac.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 22302
IP address blocks: 96.43.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:dc:4e:9c:6c:79:e9:1d:51:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=f34074a4-ec0a-4c9f-b475-e071c0f27447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:ad:5f:b2:8f:4d:86:d5:cb:83:83:3e:f2:
d5:56:77:bb:be:ae:a5:c1:1a:3d:3f:d8:fa:2f:ad:
76:28:84:4a:92:8b:6b:59:ee:0e:aa:7f:22:46:d5:
1c:2a:22:96:9c:64:52:3e:80:c1:c3:2e:a3:cc:c5:
5e:d4:da:f9:ec:6c:82:ab:aa:d3:e3:61:ea:d1:9a:
30:20:be:c8:67:4b:87:8b:6c:27:31:6e:31:e2:f2:
10:66:f3:e0:bc:f0:30:f4:74:c7:e6:fe:a7:b9:be:
fb:8e:61:d7:3c:32:c3:d5:eb:32:9a:81:68:8a:f0:
a5:ed:5d:ab:d9:83:8c:bb:64:05:d7:10:47:6a:fc:
3d:b8:a1:88:02:4f:f6:a9:0a:6c:8e:1d:a6:f2:69:
35:22:ff:51:b8:4b:df:82:31:af:3b:75:ec:de:3e:
1f:4d:67:ad:53:63:9c:61:0b:7b:d1:33:1c:5f:e2:
e6:6f:35:c4:8e:fe:71:0a:b8:f6:ae:d7:d2:29:46:
b7:cb:8b:1a:01:b7:16:7c:1d:95:bf:88:dd:e8:fe:
4a:db:c7:f8:95:cf:5f:d7:51:0e:3c:71:5e:fd:6d:
be:88:dd:cc:9e:76:3b:40:08:80:3d:f1:a9:f5:a3:
81:db:f9:5b:51:91:9a:d0:93:e8:c5:48:72:91:9c:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4F:9B:BC:F9:B5:16:C9:F5:00:DD:F5:8F:25:22:22:24:80:B1:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/45232cc2-d5ff-3a30-881e-770a37fd9fac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl
X509v3 Authority Key Identifier:
keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
sbgp-ipAddrBlock: critical
IPv4:
96.43.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:f0:d1:61:aa:2b:fa:4d:2d:50:19:2f:75:51:e0:67:70:07:
bb:39:9a:d0:7e:20:b4:07:5b:a9:1c:57:c4:df:74:e5:36:62:
69:f8:d2:2a:87:cc:34:31:8e:22:3f:72:e0:fb:cb:e7:aa:05:
eb:88:1f:ff:24:e0:f9:24:8d:b1:49:2f:a4:cd:5c:b4:c0:9e:
31:de:d2:e9:f5:bf:4c:27:f5:e4:a2:68:f1:5a:34:a6:93:c8:
a4:3e:bd:e0:57:ae:36:7c:c3:dc:0d:26:43:5f:c6:32:ed:21:
5f:59:8f:4e:37:da:5e:06:2a:bf:f2:76:2e:fc:2e:fe:38:5b:
bb:40:dd:b5:c2:c3:cd:29:e8:ef:a3:cc:61:28:de:31:79:f0:
20:2b:0a:d7:3e:c1:12:6c:17:36:8b:05:a9:ed:5b:19:ca:47:
b3:7f:5d:a1:67:3c:f8:b4:47:05:4e:6c:df:fc:3b:c2:e4:db:
3f:f2:bb:8f:f7:96:d8:57:10:ed:65:cf:c6:ef:1d:1d:58:b1:
bf:3e:4f:11:13:49:f0:95:33:91:65:02:f9:e9:a1:a2:50:f1:
0d:7d:20:5c:3a:34:08:17:3c:c9:20:5c:3c:ea:d9:38:60:4a:
e7:43:88:52:8a:9f:08:1b:d1:c9:c6:6d:ac:c3:17:ba:a9:9e:
b4:a3:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:00:03 2025 by rpki-client