Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa
File: cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa (raw, json)
Hash identifier: 0bBSwH4U/JLlNpUrbyplg0h1ya/vcNB88uavVc7tPP0=
Subject key identifier: 7F:2C:A2:75:9C:D5:30:0D:85:35:2A:FC:8E:B2:4F:27:C4:91:CC:19
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F4328584968B41F1D5814EBF65EE0B540
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa
Signing time: Fri 04 Apr 2025 01:00:47 +0000
ROA not before: Fri 04 Apr 2025 01:00:47 +0000
ROA not after: Thu 03 Jul 2025 01:00:47 +0000
asID: 211373
IP address blocks: 96.43.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:68:b4:1f:1d:58:14:eb:f6:5e:e0:b5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Apr 4 01:00:47 2025 GMT
Not After : Jul 3 01:00:47 2025 GMT
Subject: CN=abd96e99-8ed5-4e2e-bc1f-923bf561e480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:38:09:04:d6:81:e9:40:55:da:7f:14:97:
9b:7a:5b:84:f5:ba:6a:1d:d0:56:61:6f:50:3a:d8:
7e:f2:79:b9:fc:65:5e:c4:59:29:14:e3:69:57:a2:
a3:fc:9e:48:70:30:5f:06:72:c1:71:bb:7f:39:73:
39:41:4c:a1:b1:10:74:ca:94:f8:c8:be:e6:25:dd:
90:b8:f1:87:7d:43:c6:53:58:45:29:c0:7e:c0:29:
b1:d2:50:00:3d:cc:6d:d2:f7:57:28:7a:21:54:97:
44:dd:a3:57:5e:fb:2f:81:cd:d0:fe:20:4c:76:c5:
27:f7:d3:4c:0c:4d:f9:26:f7:cf:5f:f9:40:eb:3e:
d7:27:86:c5:37:23:b8:18:51:38:19:6b:dc:cf:4f:
22:3c:28:b8:b2:42:d0:e9:d6:25:44:47:ad:e3:1c:
f3:b1:7b:80:d2:3b:b5:33:f9:08:e5:74:86:f0:41:
3f:37:1c:94:7a:58:a1:37:91:58:d3:f9:e0:45:c1:
4b:37:8e:81:76:2a:a5:15:58:dd:ea:c4:bb:58:dc:
ce:68:43:2f:d3:a8:47:c1:79:28:e8:b1:1d:7a:21:
7f:bb:42:03:3c:22:3f:e3:6b:57:45:79:6f:8e:19:
2a:59:e2:ec:62:fb:38:0b:47:63:51:d9:6a:f4:f1:
26:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2C:A2:75:9C:D5:30:0D:85:35:2A:FC:8E:B2:4F:27:C4:91:CC:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
96.43.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:9d:50:7e:4a:51:d2:e9:b8:b3:e8:63:31:36:cb:3b:44:78:
5a:72:7a:7a:13:68:2d:d4:58:44:97:41:e6:8c:88:ac:bf:1c:
9a:c2:6a:61:86:79:2f:a4:ec:7c:23:2d:25:6e:2b:96:d4:87:
24:9e:ae:75:9d:88:6c:6b:1b:0d:fb:d6:0d:01:62:3f:17:5a:
01:0c:7a:2e:1a:fb:fa:8c:73:09:98:0a:ea:15:8a:65:56:f2:
8f:77:56:20:63:53:29:f9:7e:70:85:55:14:87:49:c2:66:37:
5c:7c:5c:6f:de:26:c3:be:87:f7:f4:5a:4a:bc:2f:7c:4c:f3:
3f:54:33:2e:ea:65:f4:82:7f:72:e0:58:9d:66:66:1d:4c:85:
78:ae:88:1e:e1:62:26:eb:30:62:e9:e0:f5:a0:70:95:46:a4:
17:bc:24:5d:5b:5d:cd:9f:e9:f3:ec:7e:59:05:08:63:62:90:
63:6d:6a:4f:8e:a1:7f:aa:88:a1:30:c6:06:e0:d7:ae:58:18:
69:4a:82:61:03:90:d4:43:6f:bb:e2:24:e6:7b:c7:ce:bf:20:
63:bc:91:0d:3d:a8:cb:0f:fa:b2:78:c9:82:55:13:b5:52:42:
03:b4:67:06:02:26:cb:3e:bc:1d:ac:5b:45:a5:55:d2:d3:ba:
d5:14:f8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:19 2025 by rpki-client on console.sobornost.net