Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e3bb331-5a1e-3ce7-98ec-b9fd0ea65ed0.roa
File: 3e3bb331-5a1e-3ce7-98ec-b9fd0ea65ed0.roa (raw, json)
Hash identifier: lcPe/DGHGxm8BSNSzTPsro9z50wBsRX+fjnHJ2JnGw8=
Subject key identifier: 45:DD:51:ED:72:48:54:B5:43:57:D5:8D:11:1D:AA:40:24:BC:BD:47
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584913AC43DEAE866FDEA11566C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e3bb331-5a1e-3ce7-98ec-b9fd0ea65ed0.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 7342
IP address blocks: 64.6.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:43:de:ae:86:6f:de:a1:15:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=54457ab7-a365-4009-8837-31322e35e1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:76:ff:9a:66:15:3a:3e:62:50:cc:6b:f6:
45:7a:41:ab:86:94:47:76:2c:51:fd:4b:df:fd:bf:
1a:02:70:ac:6e:c7:23:1d:58:91:29:77:ce:6a:3c:
77:47:93:1d:53:0f:f5:da:a1:2f:dd:25:03:53:cb:
db:42:91:63:4a:f7:7f:bc:b3:c9:8e:41:ed:54:27:
73:c9:2d:b5:9a:1f:2f:b6:24:33:25:ea:98:61:74:
bf:38:16:23:c6:4e:aa:41:99:b9:ba:4a:e3:aa:2f:
40:51:4d:89:76:ee:56:0d:96:f7:58:bd:7e:7d:f6:
3b:c6:39:94:c8:a5:ee:d0:c3:94:b2:9c:1c:ea:df:
b5:76:58:bd:6f:c6:cd:f9:20:2d:aa:e9:26:f7:36:
b2:66:3a:a4:4a:dd:8d:35:db:a7:64:01:6c:a0:3e:
88:dc:4d:4b:c6:47:bf:51:83:35:15:f3:b8:db:2b:
be:78:3b:ba:57:5e:29:0f:33:6d:5a:c3:92:7c:ab:
1b:7a:43:1a:a3:6f:e7:f1:bb:52:25:0d:06:05:e3:
6b:73:85:53:f4:90:08:02:65:fd:20:13:56:fd:7b:
70:04:b1:26:fb:89:b8:4c:36:76:7a:26:eb:ed:eb:
12:09:14:01:f0:42:d5:34:65:20:36:a0:dd:aa:2e:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DD:51:ED:72:48:54:B5:43:57:D5:8D:11:1D:AA:40:24:BC:BD:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e3bb331-5a1e-3ce7-98ec-b9fd0ea65ed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.6.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:d5:85:96:f0:e5:e2:e1:a3:46:8a:19:0c:11:a7:4c:cd:21:
0b:ec:3f:c5:89:b9:ee:11:47:0a:3e:7f:89:78:95:71:9e:8a:
e6:94:fc:78:8c:7d:75:72:55:b9:39:b2:7a:17:f6:4c:9e:e1:
6a:8b:7d:68:f7:ac:f6:fe:42:54:18:a3:4b:43:c4:8d:ba:c0:
0f:ae:6a:f8:f6:df:d8:18:35:c2:26:62:15:ce:12:c2:b9:f4:
e9:ab:c2:05:e3:f4:0a:f8:05:3c:7d:ca:88:dd:b1:b0:73:c9:
0e:cb:63:f1:de:60:18:87:a2:4c:0c:10:a0:37:34:77:ff:d8:
5e:27:bd:c1:fb:25:c5:ff:25:08:68:cf:b3:aa:4f:ba:ff:bb:
b7:81:e8:42:a6:1c:8f:9c:be:0f:76:26:65:be:b8:fd:69:b7:
de:d1:03:46:5b:3a:60:23:d3:22:4a:c0:d7:59:b1:6c:50:d9:
ef:b1:00:e4:7a:17:a3:9d:2a:5b:2d:33:7c:6a:c1:21:53:15:
ed:5b:c3:53:ee:01:4d:b1:b5:68:cb:9c:26:bb:68:2c:38:53:
98:5c:4d:f3:0e:3c:8f:ac:df:8e:49:63:1b:63:cd:76:17:36:
4c:bb:ef:8d:0d:76:77:5b:26:c1:bc:03:22:09:b4:7a:6f:d4:
ed:98:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:12:24 2025 by rpki-client