Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa
File: 5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa (raw, json)
Hash identifier: kh9f1Z1SELUl44aYWWekQLEmVIPN1ixP+s03RjoEcHY=
Subject key identifier: D6:37:11:BE:45:23:A3:1F:AE:69:01:F7:1F:A9:5A:9E:F7:42:C0:CC
Certificate issuer: /CN=ff7959e1-b47c-43d5-89e1-72b6a534e066
Certificate serial: 010D0C9F43285848090FAB58C44C77184F25A480
Authority key identifier: AF:32:C1:E6:35:B8:EC:F7:E6:66:76:14:9B:EC:E7:FD:57:A8:DA:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 29997
IP address blocks: 204.16.252.0/22 maxlen: 24
2620:0:2e60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:ab:58:c4:4c:77:18:4f:25:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7959e1-b47c-43d5-89e1-72b6a534e066
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=9b1dfb0a-507c-4084-a8d2-db117e44cd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:03:76:ba:9e:c9:2b:37:16:d1:ed:94:e4:
65:3c:66:e6:f7:61:ed:b4:5d:6d:cb:c7:5e:af:fb:
9c:5f:ae:15:f5:fa:ed:27:5f:40:f0:d7:5a:2a:08:
ed:67:21:30:40:6f:b7:ca:da:b8:0b:d4:19:77:d5:
e6:a2:eb:a4:fa:09:f4:61:70:74:57:42:54:bc:62:
b6:d9:a7:7c:92:68:7c:c1:33:2a:96:1e:a2:fd:ae:
18:f4:2a:68:de:de:b9:03:d4:a5:57:b0:0e:e1:02:
bb:47:be:6f:34:7d:1f:4f:40:fc:d6:4f:1e:1c:e2:
cc:f0:43:eb:80:2a:e9:7a:80:cd:03:90:ce:5f:83:
73:60:80:18:18:cf:05:54:1e:dc:6e:25:d4:eb:cd:
95:4c:22:d2:37:d0:af:99:86:39:70:29:a4:58:e0:
a5:a3:bc:11:54:b5:d4:75:0d:11:0a:28:9c:02:4f:
1a:a4:ba:55:ea:bd:e9:b0:d8:c6:d1:59:7c:09:66:
bf:54:39:f4:1b:0e:6e:cf:bf:f2:b4:22:85:c5:2d:
be:9e:02:1c:5c:91:f3:f9:dc:cc:52:97:71:bd:f9:
1a:19:62:c7:2c:a0:02:14:9d:0d:2a:83:b9:4c:b7:
58:50:90:50:86:6f:f3:64:a1:f6:d0:49:2c:f8:78:
4a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:11:BE:45:23:A3:1F:AE:69:01:F7:1F:A9:5A:9E:F7:42:C0:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/5a0fb0a4-0a1f-350f-980c-b34ad65c704c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066/ff7959e1-b47c-43d5-89e1-72b6a534e066.crl
X509v3 Authority Key Identifier:
keyid:AF:32:C1:E6:35:B8:EC:F7:E6:66:76:14:9B:EC:E7:FD:57:A8:DA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff7959e1-b47c-43d5-89e1-72b6a534e066.cer
sbgp-ipAddrBlock: critical
IPv4:
204.16.252.0/22
IPv6:
2620:0:2e60::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:c5:89:0b:04:2f:d4:94:f9:96:a4:46:2f:ea:8d:6d:ec:91:
00:a2:5e:e1:30:8d:2c:a6:48:21:d4:6e:4b:f8:cc:ae:13:bc:
67:a6:a4:cb:4e:bb:74:be:6d:d4:22:3c:6d:75:1e:4c:03:5c:
16:d4:b9:e1:f5:f0:74:3a:e9:fb:2d:c3:6c:0e:f1:49:83:53:
fb:fd:79:f3:fa:24:49:7b:48:3c:7a:62:ce:d3:65:67:d2:bc:
bb:ea:4e:e9:a7:08:35:c8:6b:e0:de:83:1b:93:48:15:00:35:
63:51:77:ae:d4:16:2c:c5:5f:ae:ce:ca:6f:df:b4:af:4d:17:
a1:4c:38:e2:3c:77:4d:b6:65:c4:d6:ed:af:d6:4d:01:25:44:
c2:c9:06:29:f0:ac:a0:e3:ce:49:8c:51:72:20:0d:53:39:d4:
55:bf:98:57:74:d6:06:f2:c0:d4:fe:24:9b:c2:9e:24:ea:92:
fe:ce:48:bb:74:40:d7:78:ee:5a:7c:4b:24:e9:af:8b:41:92:
0c:00:25:4c:b4:90:38:49:18:36:4d:4e:08:b6:68:d5:78:ac:
46:66:3c:6c:e9:db:fd:c6:21:b5:87:29:0b:99:6e:05:62:f0:
98:fe:0b:8b:2e:90:24:9b:47:2d:70:94:2e:d1:1f:e2:75:28:
1f:a6:b8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:06 2025 by rpki-client