Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29710ce3-a7f4-35f8-8dab-8a807adb88b6.roa
File: 29710ce3-a7f4-35f8-8dab-8a807adb88b6.roa (raw, json)
Hash identifier: NdhN9JI8tqMOBLHTOSvfLT6EJBQtnFABAWYeJQc7fEg=
Subject key identifier: 87:09:72:13:B9:E7:84:66:BF:B6:91:D1:24:34:DB:F3:45:B9:14:97
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF5714DAF5D79813AD67C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29710ce3-a7f4-35f8-8dab-8a807adb88b6.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 96.17.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:71:4d:af:5d:79:81:3a:d6:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=25452568-77ef-47b8-90e4-a9ddf7cf9d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:50:dc:c8:48:58:ea:55:41:ca:98:38:80:46:
4c:d6:66:eb:fd:b5:54:4b:39:41:b2:30:1d:7b:84:
bc:25:f5:95:43:ee:92:b3:c4:53:f4:60:be:e1:14:
18:4b:97:3d:14:e9:9d:16:bb:4b:ec:9b:23:13:2f:
0a:47:df:bd:2a:25:2a:7b:78:e2:83:4c:18:da:9e:
71:57:a6:d4:3c:32:e4:f0:9a:b2:19:34:f0:a6:1e:
6d:6c:f6:a1:4a:fc:c4:ca:b2:0a:89:9b:ff:33:c9:
34:10:05:1f:dc:5c:59:9b:d0:2f:cf:c5:9d:43:12:
c2:ed:2d:86:68:ba:14:87:db:c9:73:3b:42:02:06:
06:e7:f2:38:7e:1f:d9:72:d5:92:f8:b2:ba:60:01:
96:4f:37:24:73:99:00:4c:b8:2a:8c:0c:d4:01:c5:
75:d4:0e:b3:de:93:22:b6:0a:7f:2e:b2:c6:66:0d:
11:68:5a:e4:54:d7:e0:be:4a:93:72:2a:a2:47:eb:
87:03:05:78:84:7f:3f:77:e8:5a:75:30:af:45:43:
0d:64:e8:f2:35:d0:25:64:d0:35:4b:f1:fc:ee:90:
57:13:16:9a:4d:b7:af:c1:7a:53:36:2a:ac:5a:ae:
23:c1:53:dd:39:e2:1c:6d:9a:a3:08:b9:94:dd:1d:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:09:72:13:B9:E7:84:66:BF:B6:91:D1:24:34:DB:F3:45:B9:14:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29710ce3-a7f4-35f8-8dab-8a807adb88b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.17.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:bf:30:ee:64:5c:15:57:df:42:2a:b4:1d:02:a3:dd:7a:a4:
b9:c2:27:35:2f:7c:ad:56:3d:52:0c:ca:52:da:9b:a5:1d:21:
a1:d8:eb:02:e6:91:e8:b7:dc:6b:71:98:1c:5e:2b:57:f0:8f:
be:8b:66:3f:13:6b:8c:9d:7e:56:57:9b:de:8e:16:5e:42:c6:
fa:b0:ea:03:7c:27:d8:90:d0:25:f1:54:02:29:0d:52:8e:3e:
ca:9b:f6:2a:c8:84:22:4e:7a:f5:a0:c7:b8:10:cf:ff:a8:85:
41:36:0e:f5:6a:28:1c:53:de:23:d8:69:35:3c:b8:72:c0:b9:
e1:90:91:71:c2:7b:80:44:da:95:cd:e0:65:d8:e5:90:1c:c6:
2b:51:78:96:8e:e3:9a:17:4c:18:1f:36:a7:7d:dc:99:fb:29:
f6:db:3d:e1:b1:16:fc:31:52:0d:cf:f2:78:66:26:1b:f5:ef:
98:65:aa:8c:31:c4:f8:71:9c:59:32:4f:c2:eb:6f:20:ab:61:
93:0c:fb:9a:65:3e:2c:ad:88:61:a5:cb:a7:4c:96:20:04:d6:
c9:29:3f:98:cd:69:dd:c4:b5:88:dd:f4:a0:c0:7b:ba:11:b1:
40:1a:37:36:36:25:d1:aa:a3:3e:92:a0:f7:97:59:a4:5a:59:
a7:56:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:00:22 2025 by rpki-client