Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33d85d43-8995-3afe-888d-f0b6318ae685.roa
File: 33d85d43-8995-3afe-888d-f0b6318ae685.roa (raw, json)
Hash identifier: HR4ZvFguSGU7zyJHjZd26lk7vUDU93UXULS+zS8Bfk0=
Subject key identifier: AF:E3:BD:52:80:3B:A9:8F:80:F9:FB:55:E9:6D:ED:CF:AD:09:74:B1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF5704EDE95050893AEB1C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33d85d43-8995-3afe-888d-f0b6318ae685.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 96.16.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:70:4e:de:95:05:08:93:ae:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=8dda275c-0cd7-4527-9c12-314c235780ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:69:6b:c4:53:bc:65:15:cf:88:53:ff:c5:
ae:96:b0:2a:ec:57:bd:35:ea:b7:6c:b3:03:e2:b1:
06:10:58:83:b3:ae:82:9f:06:0d:4a:fa:d5:36:a4:
5a:34:bc:b8:be:9b:5d:13:db:ea:09:f7:36:23:cb:
eb:34:f3:c7:a5:40:a0:46:fe:22:ae:e5:15:4d:74:
31:22:a1:b9:e5:bb:2d:be:87:3b:ca:0d:ef:f9:26:
94:44:45:c3:54:0c:18:3d:c4:8b:39:17:8b:dc:f7:
e1:7d:72:73:0a:91:70:31:d2:c4:ba:14:a3:76:08:
1a:c1:18:7e:5e:60:b3:31:70:10:a0:f3:59:d6:92:
fc:e6:ad:3d:a1:96:7d:32:4e:3a:0a:98:72:77:c9:
15:01:5e:f8:29:c0:a4:06:26:1f:4d:83:87:5e:b1:
7c:8e:f7:6e:0d:11:bf:09:77:d9:5f:06:3f:2b:1b:
53:cb:92:17:91:4d:9a:be:8f:36:c9:59:ee:8e:53:
0d:cf:d3:77:af:33:a0:3d:78:e2:3f:91:8f:76:f0:
e6:d0:3c:e1:d1:cb:5b:23:7c:40:30:f0:16:8c:67:
15:13:d0:87:17:2f:f9:2b:1c:6b:8f:3f:a5:d0:79:
06:6e:7e:47:de:5e:d0:23:30:1e:e8:76:5e:da:d5:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E3:BD:52:80:3B:A9:8F:80:F9:FB:55:E9:6D:ED:CF:AD:09:74:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33d85d43-8995-3afe-888d-f0b6318ae685.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.16.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:37:4e:f2:9f:1f:70:79:ef:be:35:6b:61:4c:a2:1c:9d:7b:
c3:13:9f:93:3e:1f:15:6c:01:10:df:56:bd:2b:64:bc:28:59:
2d:98:05:72:4e:97:a1:a6:63:09:9f:6b:e2:1c:2a:71:50:b6:
39:89:32:c7:c3:99:64:b3:00:2d:fd:92:9a:db:b5:f9:e6:d7:
95:88:c8:55:90:ce:1a:a5:83:c8:f6:3b:18:cf:a1:6b:f6:07:
30:39:29:07:b8:30:9f:ff:7b:bb:9e:38:b0:24:db:84:b3:e7:
4e:96:a3:31:00:ee:85:77:b3:e6:23:0a:b9:5a:ba:8a:b3:d8:
84:de:5d:48:77:27:9c:71:fc:f5:5f:20:7d:4e:54:eb:d9:af:
a7:d1:cb:e3:96:cc:39:d6:e4:50:c6:8d:f6:63:38:ed:1b:4f:
ae:48:31:84:76:9c:0e:ee:85:e9:0c:1d:67:7b:65:ca:2b:71:
44:53:6b:99:88:c0:52:cc:e3:3d:50:68:7a:08:8f:f3:86:af:
00:60:aa:70:58:42:f6:57:25:3a:c1:4c:50:88:a0:f5:4c:4e:
ed:f1:ad:02:71:dd:24:9b:2c:1b:90:60:31:30:89:5a:94:d1:
88:20:0b:33:b1:ea:6e:0e:07:70:25:cf:c0:9a:21:b0:d0:68:
b8:d0:03:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9XBO3pUFCJOuscAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
OGRkYTI3NWMtMGNkNy00NTI3LTljMTItMzE0YzIzNTc4MGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwClpa8RTvGUVz4hT/8WulrAq7Fe9Neq3bLMD
4rEGEFiDs66CnwYNSvrVNqRaNLy4vptdE9vqCfc2I8vrNPPHpUCgRv4iruUVTXQx
IqG55bstvoc7yg3v+SaUREXDVAwYPcSLOReL3PfhfXJzCpFwMdLEuhSjdggawRh+
XmCzMXAQoPNZ1pL85q09oZZ9Mk46Cphyd8kVAV74KcCkBiYfTYOHXrF8jvduDRG/
CXfZXwY/KxtTy5IXkU2avo82yVnujlMNz9N3rzOgPXjiP5GPdvDm0Dzh0ctbI3xA
MPAWjGcVE9CHFy/5Kxxrjz+l0HkGbn5H3l7QIzAe6HZe2tW90wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK/jvVKAO6mPgPn7Velt7c+tCXSxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzNkODVkNDMtODk5NS0z
YWZlLTg4OGQtZjBiNjMxOGFlNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBBjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJM3TvKfH3B57741a2FMohyde8MTn5M+HxVsARDfVr0rZLwoWS2YBXJO
l6GmYwmfa+IcKnFQtjmJMsfDmWSzAC39kprbtfnm15WIyFWQzhqlg8j2OxjPoWv2
BzA5KQe4MJ//e7ueOLAk24Sz506WozEA7oV3s+YjCrlauoqz2ITeXUh3J5xx/PVf
IH1OVOvZr6fRy+OWzDnW5FDGjfZjOO0bT65IMYR2nA7uhekMHWd7ZcorcURTa5mI
wFLM4z1QaHoIj/OGrwBgqnBYQvZXJTrBTFCIoPVMTu3xrQJx3SSbLBuQYDEwiVqU
0YggCzOx6m4OB3Alz8CaIbDQaLjQA8k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:02:30 2025 by rpki-client