Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/627c057f-f967-3505-9f43-627a8af01c80.roa
File: 627c057f-f967-3505-9f43-627a8af01c80.roa (raw, json)
Hash identifier: hfe93ir7h1cjQZWGvXLbjG5pr3+lEQFoIfNKu0Nc6Wg=
Subject key identifier: C0:7A:A7:F0:72:40:6D:E8:BA:22:C3:EA:A1:7A:23:39:26:0B:89:66
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150CE86EEF6E4E6AF5DD740
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/627c057f-f967-3505-9f43-627a8af01c80.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 931
IP address blocks: 64.112.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:ce:86:ee:f6:e4:e6:af:5d:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=e1065923-51fe-4a1d-a5a1-ce11f8bce648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:f0:19:d9:ce:65:25:2b:79:3c:ae:a6:32:
8c:f8:f0:01:5c:94:ec:04:36:c0:b2:51:d6:5e:9a:
4e:9a:31:1e:03:51:34:c1:ee:3c:46:ef:0a:9f:0a:
a0:55:80:ed:73:b2:1b:91:b3:4b:3e:3e:d3:5b:f5:
a0:c9:68:f3:f7:f0:14:2f:a9:d5:4e:6f:d1:ce:67:
57:b9:e0:fc:db:62:79:a7:4f:5a:59:a2:da:76:ec:
ac:1f:6a:99:a2:12:08:73:54:ac:b0:c0:1f:95:01:
55:93:a2:2b:35:3c:39:13:d3:ac:2d:f1:b0:f4:49:
82:f3:c1:6a:ae:e1:ac:ea:93:c1:73:96:72:6e:2b:
22:dc:14:a0:eb:27:f6:c6:18:80:b1:d6:c7:9c:83:
9a:52:9d:f2:22:58:84:3b:bc:c8:ea:c0:0b:c4:af:
d7:b0:68:a5:8f:69:53:94:87:de:5d:b2:90:ba:fe:
fa:d7:43:74:23:c9:38:0d:66:79:f5:67:d0:af:cc:
b4:7c:bd:26:50:f5:3e:eb:af:9c:a6:4b:61:b4:d5:
62:d6:0d:8b:27:cc:05:88:07:18:8d:bc:7f:fc:39:
d8:00:4d:ec:96:d5:b3:16:9b:c8:5c:9a:9e:4e:37:
84:60:57:bd:11:47:01:fd:4d:b3:de:7c:19:28:3a:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7A:A7:F0:72:40:6D:E8:BA:22:C3:EA:A1:7A:23:39:26:0B:89:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/627c057f-f967-3505-9f43-627a8af01c80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:a9:94:dc:e9:7a:58:35:3a:e4:ee:ad:9a:9e:5c:7f:a5:81:
94:5c:be:bf:17:ad:be:1e:ea:2e:85:fa:11:31:90:9d:69:ea:
85:9a:a8:20:a9:64:22:8a:45:82:cd:8c:f0:8a:60:21:dd:26:
fd:5e:77:cd:47:4d:0c:ff:b8:ac:3f:58:dd:12:3e:40:bd:d1:
21:4d:5e:b7:89:38:fa:5a:3a:b7:54:c0:69:dc:55:5e:92:9a:
0b:2b:f4:81:e9:c1:2d:62:d2:8f:a5:89:1d:88:03:89:d8:43:
3b:50:74:98:68:ba:eb:41:09:2e:52:ac:d4:6e:1a:27:3a:3b:
7a:df:09:83:b3:96:61:d3:d3:ee:6f:8d:55:75:51:05:2c:b6:
4c:f4:c4:1b:53:ad:47:b8:f1:21:a3:6b:42:71:03:c6:37:a2:
7a:25:34:0c:ba:87:bb:66:c1:0b:31:d5:66:b1:dd:ca:09:94:
f6:24:85:89:f5:23:b3:1a:a6:8c:11:0c:35:8a:68:43:04:59:
ec:3b:7b:4b:7b:0b:fd:3c:bd:6c:88:fb:07:72:5d:3c:0d:3c:
58:76:20:12:bc:e3:d2:85:18:62:74:e3:95:f8:2e:b4:7e:00:
cd:1e:04:70:6e:4a:38:21:de:d8:2e:3b:7b:f2:db:4f:6b:c8:
6c:a1:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:19 2025 by rpki-client