Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99c63b96-4371-3a98-9b80-8a32184cb2ae.roa
File: 99c63b96-4371-3a98-9b80-8a32184cb2ae.roa (raw, json)
Hash identifier: fIyJG0aiJqyPXDOZH3rZM0bKnmcc2jqEJuCCEThnO/o=
Subject key identifier: 47:9F:FF:7F:9E:58:F8:0E:18:4C:97:13:ED:35:C4:CC:46:55:B1:99
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584840E5BD1C2BC33497202BA680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99c63b96-4371-3a98-9b80-8a32184cb2ae.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 184.24.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:bd:1c:2b:c3:34:97:20:2b:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=9d5e78f4-d965-46ea-8779-b5862a903fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:e7:fa:84:27:ec:f3:71:62:a4:a5:aa:89:
58:5a:58:99:c0:4c:01:08:3f:81:18:e2:09:f0:4b:
3e:d8:25:9b:0f:72:14:16:d8:75:60:b2:c6:a5:9a:
99:23:f8:23:25:fd:f4:b0:92:1f:36:77:00:25:d4:
2f:40:01:5d:78:f4:7c:46:84:f0:66:f7:64:83:5b:
7c:6f:2e:9a:6d:8a:ad:17:f2:dd:36:19:29:9a:fe:
75:be:2d:d0:fc:e2:2d:8e:95:7a:b8:73:2c:01:6e:
04:e7:73:b2:c8:29:46:62:5e:f9:73:81:7e:99:79:
47:27:60:11:69:92:90:61:0b:d3:ad:4e:82:34:4e:
30:d6:9c:3c:7a:9d:26:a5:31:f5:fd:63:cd:27:8b:
e1:38:c8:98:67:13:82:77:e3:98:e7:4b:a7:36:6e:
95:da:72:9c:4c:fc:6d:8f:16:02:a5:6c:0a:5a:8b:
d8:21:73:6e:d8:9e:2a:f5:f5:bf:24:08:c4:4d:d3:
c3:0b:91:3f:86:0b:ac:7f:8a:f4:a1:ad:f4:c2:57:
1c:39:83:30:c0:ee:63:df:18:b9:1a:3f:cc:8b:b5:
72:55:92:c2:6a:fa:97:97:66:48:35:ee:85:dd:0a:
a0:0f:b3:c9:34:23:b0:84:d0:21:cd:d6:f4:54:ae:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9F:FF:7F:9E:58:F8:0E:18:4C:97:13:ED:35:C4:CC:46:55:B1:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99c63b96-4371-3a98-9b80-8a32184cb2ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.24.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:42:e4:43:05:0f:53:dd:f5:a8:1b:13:9c:63:9d:7d:1d:f1:
42:38:b5:07:b5:cd:92:93:52:31:3f:73:c9:66:c6:40:1a:a8:
8b:9b:36:a5:eb:33:27:c4:56:47:14:f8:79:08:22:5d:d0:de:
1c:d7:d3:82:d3:6d:10:c7:2d:3b:a7:39:f5:24:7f:bd:02:6c:
8a:07:6f:a8:e0:34:8b:a7:fc:c5:de:c4:b9:ad:1a:91:2f:8f:
28:e2:be:4b:18:8e:65:13:1a:ed:f7:15:97:97:a4:9e:a0:52:
3b:28:90:81:47:bd:0b:0e:ae:38:27:66:27:06:9a:e1:87:5e:
f1:18:f9:05:4a:34:fd:d6:c1:71:97:b3:e8:50:82:06:3e:4e:
15:a2:e3:32:61:05:77:61:c7:83:f4:db:87:8a:14:cc:a4:de:
f7:1c:10:6c:6a:e9:33:a8:e7:8c:3c:31:f3:15:71:ee:e6:ff:
61:bb:90:1d:11:37:bb:51:28:9f:43:2f:29:e3:98:3b:20:18:
29:bd:6d:a6:6f:40:cf:32:51:3f:bf:f8:f3:cb:a6:fd:27:e9:
e5:dc:87:ae:f8:11:71:72:60:39:76:2c:81:21:2b:82:12:b9:
8e:f7:6d:6b:5b:f1:3b:8b:cf:2c:eb:11:e3:36:48:68:02:13:
b4:c1:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:41 2025 by rpki-client