Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8cb3d3d-392e-3fd1-abeb-a8f2761936a9.roa
File: c8cb3d3d-392e-3fd1-abeb-a8f2761936a9.roa (raw, json)
Hash identifier: RgaguRyyG+4e9NfX9Rvr5Ra23yL5a4EZqrs1Ryz3b7A=
Subject key identifier: 27:48:5F:3D:71:8A:F7:6C:25:95:98:69:0E:05:CA:D4:EB:96:4A:41
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF56FD8AFB6E9F53AD69440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8cb3d3d-392e-3fd1-abeb-a8f2761936a9.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 96.16.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:6f:d8:af:b6:e9:f5:3a:d6:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=b729370b-df1a-4c28-b2ad-6c36f2b8afa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3c:1f:cd:40:6c:15:cc:08:be:07:0e:4f:f3:
0a:db:e8:c2:3d:80:f2:c5:9c:51:06:9f:f8:8d:0a:
e9:63:85:9e:48:63:74:4d:04:5d:e5:f1:56:f0:6e:
f1:b7:7d:a8:4f:8b:b4:ed:fa:c4:e4:11:5c:60:f7:
af:f6:df:cd:ef:4a:5c:28:4b:ea:42:22:56:fc:2a:
2d:37:8e:ad:89:cd:51:fe:04:48:67:77:0e:77:52:
bd:89:1a:3b:2b:d5:e2:f8:68:d9:eb:1e:fb:31:8c:
8a:2f:5f:fe:78:5d:bc:ac:a2:28:7a:5a:a5:73:86:
d0:75:bd:43:87:ba:66:cc:27:46:1f:ad:15:8e:2d:
9f:63:7f:91:77:ac:06:15:3a:05:61:e3:b6:1e:72:
18:2e:e8:c2:8d:37:97:89:11:51:7f:c8:a8:37:6e:
50:be:8d:bb:6c:e2:77:6b:ae:17:89:b8:43:90:c7:
a4:d5:47:29:06:29:fb:8c:f1:1d:be:61:43:b0:e9:
8b:62:7c:3a:3e:83:de:b8:2e:ef:e8:00:79:45:8a:
85:b3:f7:19:9f:06:32:f6:36:54:3b:b3:ad:f4:47:
e0:12:45:d5:1b:44:c2:db:be:72:19:ad:83:e7:76:
bb:6e:b4:ca:a2:42:53:0f:a5:cb:41:a7:00:95:a7:
c5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:48:5F:3D:71:8A:F7:6C:25:95:98:69:0E:05:CA:D4:EB:96:4A:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8cb3d3d-392e-3fd1-abeb-a8f2761936a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.16.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:a0:95:18:8f:85:8f:94:61:69:8c:0b:95:c0:0b:78:c8:c2:
29:22:74:75:62:01:3b:a5:36:86:41:57:5c:89:a5:01:62:94:
69:fb:98:2b:a8:8c:61:26:cc:ce:df:76:16:c7:57:48:8f:89:
02:68:74:62:cf:b8:f9:82:0d:05:33:60:0d:1c:53:87:a9:a8:
70:97:21:46:d8:28:6e:0c:c6:9b:74:8f:27:23:0b:51:24:cd:
21:1a:fb:a9:88:91:32:07:d6:cb:3e:b5:b0:d7:d0:0e:d5:e3:
47:09:dc:96:ff:bc:2e:78:94:0c:10:d4:3e:d5:b3:9f:9b:aa:
5e:73:66:47:fa:3c:38:cb:43:42:20:8f:8c:a9:fd:1a:13:cc:
72:f6:39:ad:89:6c:1e:b5:38:d5:a7:ad:79:ec:c8:66:36:39:
c7:b1:f8:e3:03:a2:ee:49:99:19:b8:c2:50:fd:34:f1:e9:21:
2f:ef:32:7d:25:9f:f6:56:cc:9c:4f:e2:d8:f7:c1:0e:ea:c8:
51:37:a7:cc:01:31:1c:17:a5:7f:c2:3c:f5:ea:81:d6:e9:49:
2a:17:6b:8d:7e:78:4f:c1:5b:1d:9e:41:c9:ff:0f:3f:f0:2d:
aa:6b:02:2a:e8:42:68:c5:cd:ca:da:f3:75:e5:07:c3:cd:f3:
f7:82:ca:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:12:11 2025 by rpki-client