Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a265a1a4-7a67-3b8e-9eed-a7a8e636fdf0.roa
File: a265a1a4-7a67-3b8e-9eed-a7a8e636fdf0.roa (raw, json)
Hash identifier: tz4yl9SyCYm7Xe2XmnwIwTOS9yY1wsbjslbf4F4BkE8=
Subject key identifier: DC:DF:7E:2E:78:D0:7F:37:FD:B6:51:22:2B:22:83:71:9C:3E:0C:D7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF56FFD8BF91412CE35CD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a265a1a4-7a67-3b8e-9eed-a7a8e636fdf0.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 96.16.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6f:fd:8b:f9:14:12:ce:35:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=fa4957ea-c9e2-45ca-a608-468cfab9e067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:e5:82:d4:b0:90:6d:b2:93:9a:af:d4:65:
04:a0:a8:c2:ae:55:1b:9c:dc:65:b7:7d:42:d0:29:
da:76:03:38:e8:9e:84:a8:3b:3d:77:3e:33:1a:47:
54:c7:81:47:cd:5c:b4:f1:cc:70:de:2a:31:b2:e0:
25:dc:a2:36:d7:6b:fe:a0:8d:0a:d7:fa:cc:7e:78:
51:d3:5e:6a:a0:ac:39:6c:29:c4:2d:9a:f0:37:ac:
a2:ad:6f:bc:9d:1b:d0:23:a9:34:87:e6:3a:b3:c8:
7f:da:11:fe:f2:0c:8b:ec:91:99:2b:10:66:11:98:
74:8d:4e:6c:6b:83:1a:7a:e1:54:1c:3a:e5:34:48:
38:4a:f1:ab:2c:ed:b5:ba:ef:69:d0:75:f6:24:56:
30:09:56:bd:ea:04:6b:35:6e:aa:28:36:f4:af:ce:
44:ce:d9:f7:ad:88:c5:0c:3c:ac:24:91:1a:7d:a8:
c8:3f:c3:07:17:a3:77:4b:82:7d:ed:0a:c1:56:c4:
4a:98:f9:43:d0:bf:31:93:bd:66:e2:7d:3e:4c:d8:
d0:42:6a:dc:ff:7a:89:b8:a9:74:81:23:c1:5e:c6:
b0:01:bb:39:31:19:2b:6e:a8:c5:ec:53:17:20:6a:
29:78:f1:24:33:f7:24:d7:bb:f1:1a:b8:94:16:40:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DF:7E:2E:78:D0:7F:37:FD:B6:51:22:2B:22:83:71:9C:3E:0C:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a265a1a4-7a67-3b8e-9eed-a7a8e636fdf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.16.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:27:5a:46:4c:d3:c0:9a:73:c0:94:d7:26:55:f8:0d:1f:68:
71:0f:fa:f2:5b:32:bc:ae:c3:be:23:76:f3:31:57:ef:70:7e:
5c:bf:46:df:48:5f:c5:ae:71:85:2c:8b:39:79:c4:d2:06:57:
1c:5c:5e:8d:69:ab:a9:ca:03:61:ba:ba:e8:9d:9b:02:5a:1a:
bb:dd:ad:6e:01:b3:6f:58:ea:1c:5c:e0:61:37:59:0c:73:6d:
e0:20:56:d1:5a:d7:b8:54:94:eb:b5:e2:f3:cb:4a:e7:07:57:
12:7d:25:0a:bb:8d:af:97:f0:a7:a3:09:a9:54:dd:58:70:87:
c3:29:ba:7c:be:b4:71:7a:f4:d0:47:0a:bc:e8:30:8a:97:f7:
5e:c3:fa:c4:2e:8d:bd:d3:a7:b1:36:84:c4:77:bd:94:2d:25:
be:bd:0b:a0:1b:81:dd:1d:04:9d:6e:7d:06:12:46:21:67:56:
2c:b9:78:3f:74:98:75:37:4c:99:14:8f:5c:b5:f7:a0:f6:91:
07:29:86:a2:6f:8e:7b:97:cb:45:f9:3d:69:5b:0f:d9:59:71:
03:6b:0c:7d:0d:1f:03:55:a5:3a:39:ba:5d:ce:fa:49:36:5c:
61:6b:9f:b6:c9:b1:57:04:ac:36:8f:eb:3e:8d:cc:49:ab:16:
70:39:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:42 2025 by rpki-client