Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/660c4222-a152-3f52-9093-08167e85ee0b.roa
File: 660c4222-a152-3f52-9093-08167e85ee0b.roa (raw, json)
Hash identifier: NZVJ9o9gQfW3XZtjTjLXz3TuotxO0fVmvDdl1i3qnsY=
Subject key identifier: AE:7D:9C:31:C9:A6:12:85:52:D4:1C:03:A8:F5:8E:56:78:AA:31:E6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848222FF1F2DAB9D2F9D9BC7150
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/660c4222-a152-3f52-9093-08167e85ee0b.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 20940
IP address blocks: 96.7.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:f1:f2:da:b9:d2:f9:d9:bc:71:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=79c6d943-f26f-4f3b-a616-bd03d5061559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:fa:70:2b:9e:f1:a8:91:10:e0:97:1d:a4:
2f:11:53:10:c4:cd:89:dc:f3:4b:02:c3:bb:85:2a:
11:b7:60:49:c0:a9:57:02:92:35:8f:a0:c3:f6:27:
c7:f7:93:37:3e:a5:84:4e:24:cb:74:48:55:1a:8e:
33:bb:74:9a:b1:14:91:69:28:47:af:71:23:d8:8a:
30:72:00:b1:43:e0:2d:5c:49:f7:72:47:e8:a1:0c:
eb:35:c3:48:0f:a6:95:e3:82:5d:de:2e:78:82:29:
d0:c1:52:1c:56:3d:ad:1b:0c:a8:c1:60:88:0a:29:
6b:2a:f7:35:38:d2:40:88:ae:0b:5d:ad:a1:24:af:
13:2c:b9:03:ad:7d:45:01:c4:c4:6d:1a:bd:2c:13:
0b:56:4b:90:93:f2:e1:6b:22:2c:f7:c5:9e:a6:c4:
1e:e6:47:51:fe:89:b9:2a:1c:84:70:bc:9e:d8:d9:
a4:b8:c9:44:22:96:45:d5:2f:56:35:fe:3b:86:fc:
76:1d:32:f2:21:94:78:f3:a8:a8:d8:2e:a0:6d:6c:
72:f3:52:15:76:ee:38:69:1b:4e:ef:64:23:00:89:
02:d5:10:60:7d:75:4f:35:20:1a:98:3a:ad:bd:c2:
1b:91:86:23:fc:86:08:21:3a:a8:7f:a8:56:73:fc:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:9C:31:C9:A6:12:85:52:D4:1C:03:A8:F5:8E:56:78:AA:31:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/660c4222-a152-3f52-9093-08167e85ee0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.7.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:18:54:33:1a:b8:bf:ab:d3:48:df:15:2c:16:8c:11:0e:d9:
85:2f:b9:f8:1f:9b:3e:33:67:4c:1e:57:6c:9f:a6:79:69:66:
3d:a3:6a:e3:79:4a:6d:e9:70:ec:46:68:45:4a:78:d9:4a:7b:
a6:a1:c8:a2:54:5a:7e:15:c0:de:76:19:3b:67:95:db:e1:24:
27:c5:ca:bf:0e:e9:ff:01:cb:2e:50:d1:26:f8:80:8c:a1:b5:
2d:09:2d:5e:12:0a:e0:5a:ff:ec:cc:cb:49:f2:a2:46:5a:31:
bc:df:6e:cb:cc:c5:d6:91:69:52:d2:24:a7:9a:ca:22:02:72:
a0:df:db:72:a7:b5:bd:54:64:54:16:60:a0:7a:06:b3:a1:fc:
53:cc:a9:88:11:93:e6:88:22:33:18:b8:84:1e:d5:88:91:a9:
49:f7:ec:08:94:ec:8a:b0:18:aa:f2:25:68:da:65:57:8b:6f:
49:7b:ff:90:89:b3:b0:66:d1:8a:27:b4:c3:c0:11:9e:d1:8f:
94:06:e0:f1:38:4f:11:5f:86:f9:a3:24:67:ca:e4:92:c6:61:
1a:9f:1f:ac:55:7f:22:d5:2b:f7:47:ba:c6:a1:4a:cd:96:4f:
12:b6:55:07:da:c6:e6:fc:8e:c5:cc:3a:1f:38:2b:24:40:27:
0b:10:d7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:53 2025 by rpki-client