Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a48ac732-9019-3598-a4a6-eb72ab812f54.roa
File: a48ac732-9019-3598-a4a6-eb72ab812f54.roa (raw, json)
Hash identifier: 1IXSQs8xX8ZkkRC44os6gkFhcNtx+tXI1UJHyajJGk4=
Subject key identifier: 09:44:54:61:9B:FA:AD:F3:72:AD:F8:2E:07:9E:89:76:AC:1D:60:74
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848222FF057F39C9071068B4D60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a48ac732-9019-3598-a4a6-eb72ab812f54.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 20940
IP address blocks: 96.6.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:f0:57:f3:9c:90:71:06:8b:4d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=056181b5-ec8b-43d0-b3c4-fc4f01fe0f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:31:5f:83:87:2f:67:c4:90:2a:ec:1f:83:
15:86:3b:0c:13:c7:45:a3:81:58:68:6e:74:e8:33:
dc:c4:b8:ac:82:47:ec:d4:d1:10:89:df:ff:04:c3:
bf:8d:6a:0e:0b:22:62:70:34:ef:d1:c2:14:25:92:
2b:2c:8c:43:6b:8b:be:89:17:ea:4f:a2:a8:c2:0c:
7b:28:32:8f:cc:bb:22:de:bb:5e:5a:26:2a:cd:47:
00:fc:67:dd:b3:9b:0c:46:21:ed:74:ad:6e:fb:31:
eb:74:ba:13:02:3a:11:31:7f:47:80:21:8c:14:53:
e3:c4:d3:92:ed:be:e8:8c:2a:c4:4a:8e:ff:f2:8c:
8b:21:64:5f:86:fa:34:82:e8:ff:96:94:a2:ba:84:
91:54:c3:4b:e6:e2:ab:9f:9e:20:c0:e9:4b:d3:64:
96:e9:d6:2b:a3:5a:62:dd:f8:bc:85:78:ad:23:1e:
46:1f:9d:d4:32:97:d2:02:92:76:ce:b1:65:82:77:
47:0d:0e:89:fd:a6:49:8f:6e:1d:ef:93:04:87:f7:
01:bb:ec:1e:e0:06:83:5e:f1:3d:fb:17:c7:b5:eb:
db:89:0e:f0:31:a1:3a:57:d8:84:24:fb:44:da:77:
16:2a:da:70:58:13:70:08:8a:cb:4a:2f:00:02:c2:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:44:54:61:9B:FA:AD:F3:72:AD:F8:2E:07:9E:89:76:AC:1D:60:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a48ac732-9019-3598-a4a6-eb72ab812f54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.6.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:83:88:d4:cc:e3:3e:bb:88:c8:a8:1d:69:44:33:c4:8a:64:
56:07:53:9d:f5:47:5e:86:6b:48:b8:8b:ce:e9:80:05:d3:b8:
e5:06:6f:b1:31:e0:a6:45:f9:9c:54:39:0c:1d:4c:38:dc:b1:
f3:74:a9:1d:fd:4e:ed:c0:64:79:1c:44:6f:7f:1e:78:d2:41:
a5:55:e3:71:ab:86:99:0a:1e:3d:05:16:f3:6a:78:7e:d9:aa:
ff:bf:ae:99:82:cf:0a:96:91:f1:d5:16:d2:09:38:d2:59:44:
0c:f9:88:44:fc:95:d8:da:92:4c:10:0e:e9:4f:12:a5:87:a9:
53:49:69:d0:13:cc:3c:a5:e5:bf:46:0e:77:06:62:82:83:df:
a1:24:88:6c:b2:e9:20:20:4c:b2:f6:16:bf:e0:b6:83:3b:9d:
7b:4e:4b:09:8e:f7:46:c2:ea:1e:af:9c:f9:6c:c5:43:73:e4:
3d:dc:12:2a:3c:91:12:bc:c9:31:d5:ce:27:93:ae:42:16:d8:
a7:f7:a8:e9:81:c2:49:f1:5e:8e:52:56:bc:80:8f:e3:30:04:
f9:6b:4d:fa:92:c7:49:48:a5:16:52:6a:91:9b:da:72:fe:cb:
80:f7:d5:07:dd:27:44:86:54:a7:66:ae:c1:dc:23:c6:f9:69:
8c:a3:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:21:04 2025 by rpki-client