Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/450bc5ce-6f8f-30e9-aa47-acb805a09111.roa
File: 450bc5ce-6f8f-30e9-aa47-acb805a09111.roa (raw, json)
Hash identifier: BROjkFs3D5AWwUKXLD+ReobK2V8oJ9Qi8LP3b8Mc4ks=
Subject key identifier: 96:07:08:8F:20:74:F2:FB:8C:EC:9F:B9:2F:F3:7D:7F:F1:B6:B9:6C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF56988AF5175DA9A0E3780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/450bc5ce-6f8f-30e9-aa47-acb805a09111.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 96.236.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:69:88:af:51:75:da:9a:0e:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=cac2995a-0a35-438c-9890-f483a93a46af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:61:0c:93:79:c6:0a:69:7e:26:d4:c4:45:
fb:5d:31:6c:e6:f1:85:36:68:8d:c2:ce:0b:64:bf:
7c:de:57:dd:71:89:4a:f3:6f:b8:11:58:b7:25:95:
24:e2:8c:d5:48:8d:69:e4:8c:9e:22:b1:97:f1:7c:
df:57:5b:dc:cb:4d:2f:9b:d2:fd:9e:42:ba:4b:d7:
6c:c9:31:ad:c0:fc:19:30:44:d0:d1:10:08:76:2e:
91:21:df:eb:db:3d:fa:29:4e:a1:fa:62:01:7f:45:
4d:42:03:db:bb:a0:cb:da:d2:aa:57:27:91:42:c3:
b0:74:fd:7a:fa:50:fd:65:12:d6:fb:33:74:1d:7c:
50:13:cc:90:3c:26:4c:d6:8b:d9:fd:1a:eb:78:f1:
d6:84:03:e8:48:ae:5d:4a:ee:d9:a2:f3:77:bd:b1:
c7:75:b1:c3:22:89:57:f5:dc:7b:f2:5e:89:60:c2:
dc:8f:df:33:ea:b7:99:ad:95:c1:41:06:20:f1:d2:
c5:f0:a0:0a:67:d4:d8:b1:f4:97:5c:c2:c4:38:7b:
06:42:78:b0:57:a3:07:1e:cf:1d:ec:9c:00:3c:53:
6a:55:8c:cf:66:6d:57:1c:49:64:33:a8:91:91:75:
7c:94:0e:2f:55:da:c6:d2:91:f8:a7:66:4e:47:60:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:07:08:8F:20:74:F2:FB:8C:EC:9F:B9:2F:F3:7D:7F:F1:B6:B9:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/450bc5ce-6f8f-30e9-aa47-acb805a09111.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
96.236.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:b4:58:bb:e5:07:46:f6:e0:7d:3e:9d:26:f8:e3:43:48:78:
e2:eb:65:77:14:c9:29:f8:70:73:48:ae:c0:9e:8a:80:90:c0:
d8:44:19:87:b0:44:49:16:94:b9:58:a4:db:28:ed:97:82:99:
d7:5d:90:a0:a2:bd:11:2a:05:a0:c9:c8:f3:fc:5f:5d:dc:b7:
d8:a9:23:0c:20:41:57:37:b7:b9:c6:28:5c:f6:36:a2:1f:a2:
ce:a1:3a:ee:d7:be:b6:98:1d:79:3c:0e:7c:94:e1:15:38:59:
7c:61:34:f7:2d:46:24:fa:66:50:8f:c6:58:8d:2c:cf:3c:89:
88:2e:92:85:7b:9a:4e:d8:b7:68:91:05:3a:99:db:79:9a:2d:
be:9a:31:3c:bb:31:52:a5:c4:6c:07:02:6c:29:24:7e:00:91:
24:9b:f3:d3:6c:2a:2a:14:80:29:24:0a:07:76:33:0e:ca:bd:
97:de:05:2f:2e:d2:57:43:ce:41:82:e3:ca:9e:ef:82:9a:4e:
df:b8:d7:fb:7a:ae:7a:10:eb:e7:8b:36:34:89:5d:ea:39:70:
cf:28:d7:fc:83:68:da:f4:9a:43:dd:1a:fd:15:d9:e6:aa:7d:
89:79:55:47:75:98:90:2a:b4:9c:c8:2c:eb:1e:7d:35:f5:36:
fb:c3:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:53:20 2025 by rpki-client