Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/da82b637-9fa0-3c8c-9794-6717d046a405.roa
File: da82b637-9fa0-3c8c-9794-6717d046a405.roa (raw, json)
Hash identifier: ozm3WofnTHsS+/VEdlcK0qLiXCg2jYDlT+z2PEhp+yM=
Subject key identifier: D4:C1:0E:C8:63:0B:53:AB:F7:83:8D:64:7B:FF:F4:4C:07:3C:03:B1
Certificate issuer: /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial: 010D0C9F43285848BFEB956A6214E74DF8520480
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/da82b637-9fa0-3c8c-9794-6717d046a405.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 209
IP address blocks: 149.64.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:95:6a:62:14:e7:4d:f8:52:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=dfcebc09-eb5d-46a3-8a34-6f705d524931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:73:3b:25:3c:f1:ff:35:2d:fa:4b:a4:d9:
7f:41:f1:77:c1:73:38:77:a9:09:7d:4b:75:c2:ae:
6d:f8:9f:e9:b7:fd:e4:c4:80:f0:6e:ca:fd:ab:68:
04:d9:46:ee:3c:a3:8a:9b:a6:13:d2:58:57:24:23:
92:4c:db:b0:94:4d:62:2c:57:a6:de:a9:41:99:b9:
86:13:d7:8a:64:80:7b:80:41:15:34:18:bd:9a:5f:
2f:dd:56:83:fd:74:75:ff:22:66:a6:b7:a2:98:77:
ca:4e:c4:94:dc:2e:6b:d0:38:27:97:b6:5e:8a:c6:
c8:a4:6e:f2:c8:ac:c9:49:0c:c1:f8:5c:00:13:47:
dd:15:5d:b7:71:71:f8:d5:65:5b:cd:97:7a:60:f0:
f4:97:71:08:7e:ee:df:60:e5:f6:ff:64:94:dd:89:
6e:56:5d:79:22:8d:26:fe:46:76:f4:5f:b7:94:70:
f9:d0:48:90:24:7b:50:40:41:a1:94:81:8a:ab:0e:
a6:b2:b8:a9:b4:05:c5:54:2e:75:85:d3:62:86:16:
af:f1:5d:3b:f4:3a:2d:3c:c4:d7:93:41:4f:3f:20:
4b:47:4f:b3:02:a4:6f:05:8d:68:3a:40:85:3c:e0:
38:31:55:50:06:c2:a4:ba:b2:f8:da:fa:3b:2b:25:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C1:0E:C8:63:0B:53:AB:F7:83:8D:64:7B:FF:F4:4C:07:3C:03:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/da82b637-9fa0-3c8c-9794-6717d046a405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
X509v3 Authority Key Identifier:
keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
sbgp-ipAddrBlock: critical
IPv4:
149.64.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:ed:3a:38:d7:d8:0c:54:2c:a4:7a:67:6c:2d:9c:59:0b:91:
28:3a:c3:66:c8:d7:24:1a:ab:8d:df:fd:5d:a1:6a:99:ec:67:
c5:1a:68:88:7d:91:67:7b:aa:5b:40:66:35:f7:ce:fa:b5:7a:
30:71:46:af:96:b5:0c:f1:bf:0f:e6:51:91:f3:cf:41:af:83:
9f:f7:80:c9:7f:f2:81:84:b5:a4:aa:29:57:0a:13:2c:8d:ba:
41:14:e7:d2:67:cd:89:b1:28:b1:e0:1d:f4:01:43:cf:68:29:
65:d3:e5:bb:c3:1a:16:03:d9:05:c8:06:b2:82:9d:de:34:76:
d6:79:19:d3:91:81:be:5e:5f:e6:9f:da:8d:f9:33:d9:85:67:
62:a2:e4:ea:6d:97:e6:e8:a7:50:e0:ed:d6:e8:7a:82:ea:52:
14:12:06:4b:7b:9e:56:9f:5a:2d:31:d8:fe:29:ae:b0:ec:9b:
77:85:5f:ab:f4:ce:3f:5c:8b:c4:98:69:0c:44:c3:6b:6d:16:
56:05:59:32:24:00:ac:fc:bd:f9:48:1d:ca:ea:ac:f2:8d:40:
9c:f4:b9:64:d8:79:37:22:2d:a4:29:31:2b:87:75:5c:f0:6b:
a9:f1:90:c9:30:c8:92:01:47:72:9c:c0:30:93:18:95:bf:1c:
2c:03:80:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:35:41 2025 by rpki-client