Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/7d8d80c4-7794-3f22-9a0e-5054cedda512.roa
File: 7d8d80c4-7794-3f22-9a0e-5054cedda512.roa (raw, json)
Hash identifier: ZZmLvERetAehcfSNs5jYUfh6eBD9cl1wOE5KU2FhLZw=
Subject key identifier: 30:B8:7B:21:B4:82:11:FE:43:C6:A4:B2:EC:6C:03:59:28:E5:39:39
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150D05E8F9BEA45CEB5C640
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/7d8d80c4-7794-3f22-9a0e-5054cedda512.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 213122
IP address blocks: 64.112.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d0:5e:8f:9b:ea:45:ce:b5:c6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=ced3a259-7a2e-4680-ad2e-b5f95c59b71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:a8:68:e2:39:f3:82:9e:0d:00:6a:24:c2:
4b:b9:0c:4b:ef:cd:43:16:08:26:3b:c6:1d:ca:4a:
82:ce:96:ae:f4:5f:b3:1f:4c:43:b4:9a:7a:60:b2:
38:c4:29:ec:0e:41:5b:03:2d:b3:e4:96:ed:e0:59:
13:7f:35:5d:a6:89:ad:da:af:36:e0:d1:03:c7:a0:
95:ce:90:62:2f:20:83:a9:29:c5:47:87:e7:70:40:
21:54:a9:27:12:7f:6c:63:b7:47:b8:2f:a6:1b:35:
63:b3:a4:d1:b9:88:ed:f1:ad:65:39:39:45:4f:cd:
20:f8:26:9a:74:a4:a6:46:b0:37:02:dd:99:70:a8:
fc:db:8d:e1:b9:ab:6b:1a:c5:62:88:34:b1:cc:62:
c8:d2:dc:2a:3a:8a:56:58:08:92:20:50:5e:e5:e9:
28:39:da:70:3f:e7:1f:03:a2:3d:ae:3c:bf:70:4d:
25:a1:f2:d4:45:8b:97:f6:c5:6e:44:bc:5d:a7:a0:
bd:51:b0:33:18:73:68:c5:01:6c:85:6f:da:a1:95:
3f:f9:17:cb:d8:75:7d:65:d8:fa:a6:74:76:ed:03:
74:8e:7c:88:70:c6:89:35:af:20:4a:48:cc:2f:c8:
63:50:9c:a8:db:bd:90:29:eb:1e:00:4a:6b:9b:61:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B8:7B:21:B4:82:11:FE:43:C6:A4:B2:EC:6C:03:59:28:E5:39:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/7d8d80c4-7794-3f22-9a0e-5054cedda512.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:b4:3a:fb:2f:6f:72:82:38:d0:cc:cc:4d:0c:bb:48:b3:b3:
36:49:98:16:1d:f6:10:cc:ab:10:36:c9:ab:c6:32:e8:93:be:
ed:80:e5:06:42:62:bc:32:43:05:72:e1:d6:b3:2a:78:a6:fe:
58:b2:76:03:21:8a:7a:35:58:18:42:99:64:0d:77:fc:7d:52:
6e:60:ad:d3:9c:40:16:a3:d3:4d:76:87:d6:2c:86:41:f7:56:
94:08:39:21:99:72:e6:b9:ce:0f:5d:d4:ed:c6:31:d7:56:9f:
0e:c4:50:c6:27:50:a9:cd:00:38:e4:b4:35:c7:f3:42:79:74:
29:72:7d:63:13:bc:d4:a5:5e:33:6f:02:03:b2:06:5a:81:21:
2f:27:10:5b:79:66:bf:44:57:bb:8f:78:13:a1:f7:09:4a:17:
27:b6:dc:b6:d6:2a:11:cc:99:8f:d1:3a:64:a2:04:3d:96:0a:
7f:0c:fc:6c:ce:eb:75:93:b7:76:17:f4:f0:8f:ab:bf:fd:66:
c6:e8:bb:77:b0:38:4b:f6:18:c8:4a:80:6b:49:ab:09:ac:d1:
7c:bb:60:a7:05:5f:1a:5e:49:9e:58:f7:44:28:8e:5a:65:b4:
17:ef:e7:c3:f7:f8:9b:01:f0:9c:22:45:16:74:51:a8:ca:08:
3c:20:68:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:42:54 2025 by rpki-client