Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce901dff-264b-3028-91d8-c31311f305e1.roa
File: ce901dff-264b-3028-91d8-c31311f305e1.roa (raw, json)
Hash identifier: xAXdl4UxVmffAcKve6En20pb//GtTLmc7eTzXhR3jV0=
Subject key identifier: 75:96:BA:B5:0C:D1:C3:08:39:80:25:0A:61:61:2E:B5:8D:27:0E:46
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584824FA84BC7D7F90F49398AB40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce901dff-264b-3028-91d8-c31311f305e1.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 18717
IP address blocks: 72.246.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:84:bc:7d:7f:90:f4:93:98:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=57bf0ac3-b0cb-4782-b21e-8f7b0041c3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:0f:e9:ba:24:1d:b5:2b:d3:15:db:ad:91:
ea:6e:cb:03:11:73:4e:3b:a1:6e:66:9e:85:2b:73:
4b:6e:a0:c0:bf:9e:2f:01:6e:86:41:27:e7:8f:40:
3a:b3:d0:06:28:ae:aa:82:6b:b6:5b:6d:e5:f6:d0:
08:64:4d:a7:f3:80:dd:0a:56:b2:5c:73:e5:2b:fa:
45:b2:6b:39:3c:37:f3:9e:45:00:16:51:0d:4d:49:
b7:93:41:a1:42:a8:60:6e:c8:e2:17:a5:da:4a:da:
c4:41:96:8f:ce:3e:d9:18:bf:81:0e:d0:66:dd:b2:
f5:f6:f2:47:05:f6:73:05:8e:a8:89:00:c0:10:60:
32:b0:c8:38:d9:4d:a5:44:ce:96:4b:c9:cd:16:8f:
7a:d5:9e:b9:2d:e6:35:6f:6b:af:6f:54:6e:87:5e:
d3:a7:1c:e0:3a:f1:36:8b:fc:00:89:cc:70:67:17:
25:46:4d:f0:59:d6:0c:ce:e9:0b:e6:85:8c:07:f0:
cd:01:96:e5:06:85:2a:d9:75:ea:4a:a9:77:76:a9:
47:d2:27:f3:f7:ea:d8:89:34:b2:94:b2:4f:5a:6a:
de:23:c1:08:25:68:9b:23:4e:5c:ed:27:9b:95:86:
14:9f:b3:ad:c7:5a:2b:4f:7d:8f:16:94:c7:75:e0:
e2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:96:BA:B5:0C:D1:C3:08:39:80:25:0A:61:61:2E:B5:8D:27:0E:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce901dff-264b-3028-91d8-c31311f305e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.246.194.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:b4:c3:16:43:d5:76:03:b2:65:48:78:37:47:64:47:54:a0:
42:14:50:4d:9a:4e:a3:e6:db:7a:c9:75:c6:fc:c9:bf:20:b9:
e4:26:de:bc:38:75:16:f8:48:51:27:bb:b5:b8:ee:30:7f:17:
f2:31:44:17:18:24:ac:39:99:4f:78:e0:7a:d0:52:bd:59:da:
da:37:5a:0d:3e:09:26:4a:f0:62:35:2a:08:84:29:7c:78:9b:
15:0a:7d:7b:f2:11:bf:bc:6c:95:68:83:35:0f:4b:de:ee:69:
91:47:24:de:ac:47:1a:3c:92:ae:9e:85:de:51:3c:65:30:46:
c6:27:8e:27:17:5b:8e:41:99:4a:c3:14:ec:ac:a9:a0:8e:aa:
12:4b:fd:cc:c4:6d:01:e7:fd:44:0c:b5:74:15:ba:63:17:96:
c7:7b:d4:be:4e:f3:f6:21:03:91:c9:e0:c5:64:98:0c:3f:e4:
ca:37:69:ff:82:46:76:a8:9d:44:59:25:44:97:b1:31:1a:6d:
28:d5:80:68:71:39:6b:e1:68:cb:b0:5e:5b:eb:c5:de:ca:1a:
c2:f2:2a:cc:c4:44:59:2c:57:cd:36:d3:3b:ca:d2:89:31:3c:
85:fc:5a:8a:50:84:ee:31:e6:d5:27:93:6a:89:61:67:dc:51:
d0:ff:43:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:17:35 2025 by rpki-client