Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b05a6f3-0824-3757-a55d-34ec4cffa43f.roa
File: 7b05a6f3-0824-3757-a55d-34ec4cffa43f.roa (raw, json)
Hash identifier: 3XfVJYnTwqS544vc3WJv3OVIg0P3gS/H+BJapQz4l+o=
Subject key identifier: D2:91:D4:E0:70:9A:DE:94:E0:76:C3:69:85:A8:DA:C8:27:45:73:20
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF572CAC77CBE192F742A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b05a6f3-0824-3757-a55d-34ec4cffa43f.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 96.17.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:72:ca:c7:7c:be:19:2f:74:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=ebf45bae-dbc9-40a9-ab22-55346695e655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:d7:f4:13:f4:cc:de:14:45:e3:b7:3d:d5:
3b:f2:c3:60:58:08:86:76:a9:59:77:41:1a:71:4e:
8f:41:92:af:3e:db:95:64:1a:fb:e6:bd:51:8e:05:
23:cf:42:cb:83:42:c2:27:f9:be:a6:07:c6:5b:01:
1c:2f:5a:af:ad:32:51:19:77:9c:9e:61:12:39:fd:
ec:8d:0a:31:2b:a2:a3:e4:2c:4e:a0:da:c1:65:2f:
99:c0:50:ed:fd:f3:f6:ee:65:1a:ed:2b:dd:5a:95:
10:4c:3a:cf:6d:74:d4:d5:2a:63:60:e8:d3:47:a5:
b5:0d:20:ef:0e:91:f3:94:6f:e3:e6:92:32:32:03:
ec:17:b2:61:16:10:4a:bd:42:d1:5d:3c:6e:fd:bb:
46:23:bf:1b:a0:51:48:77:6c:aa:57:19:04:fc:9a:
00:0d:88:34:18:47:df:45:e9:55:f5:df:1c:b2:b1:
96:a3:7f:7f:0d:39:90:85:e2:63:fc:5e:41:8d:8b:
91:87:b8:78:f7:d1:26:8a:a7:e8:a3:6f:04:ee:66:
ef:81:d0:73:5b:d9:cf:92:12:21:06:de:f2:dd:f0:
15:b8:f9:60:8a:d7:5c:80:33:59:9e:b0:23:0c:a5:
63:8d:1f:8c:a1:89:61:ab:43:29:71:70:c7:8a:95:
d3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:91:D4:E0:70:9A:DE:94:E0:76:C3:69:85:A8:DA:C8:27:45:73:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b05a6f3-0824-3757-a55d-34ec4cffa43f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.17.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:7b:2d:7d:87:a3:88:b1:03:0c:6c:ae:4a:67:bb:eb:d3:74:
f0:56:f0:b4:ca:30:92:78:20:e9:72:58:4b:45:4f:a7:1b:0e:
46:d5:54:a1:28:7a:b1:1e:93:71:2d:c8:2f:81:a1:be:80:13:
17:bc:a7:6e:e4:96:35:9c:b2:bb:5e:d7:e1:59:5d:e4:01:9b:
eb:28:ee:e8:ec:85:71:6f:89:b7:f8:ce:85:03:9d:d4:25:e7:
27:d2:91:ee:25:b4:e5:64:d7:ae:52:33:c2:b5:4d:da:98:3c:
cb:71:63:b4:31:82:63:97:71:7e:96:ff:b4:d8:fb:38:89:51:
28:55:60:08:dc:59:8b:51:02:66:33:be:06:e1:73:30:9e:c8:
aa:f4:2f:b8:0b:3d:8f:0c:b7:17:65:19:6e:e6:17:80:92:8d:
fc:98:a3:da:4a:de:b2:0b:ec:92:07:2b:4c:87:4d:96:60:1d:
ee:3b:82:a0:81:fa:77:9f:3d:3e:76:48:6a:7b:46:87:77:a2:
5c:d7:c9:f4:af:6e:74:f3:0c:92:74:22:c8:9a:d7:de:cc:5b:
4d:be:67:81:37:01:53:0d:fa:ee:9f:fb:b8:2f:6f:11:d7:46:
d4:5d:b2:20:a4:91:d2:42:74:d2:c0:c2:5a:c4:93:db:13:d8:
d6:15:3e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:15 2025 by rpki-client