Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3283ff9c-17da-3aa6-8466-04396e8c63ef.roa
File: 3283ff9c-17da-3aa6-8466-04396e8c63ef.roa (raw, json)
Hash identifier: M3jhzU8MeBb5o4aRU4IFcmaoPwsNg6Xe7T3UbyfSt78=
Subject key identifier: 35:42:ED:F4:47:A7:D0:FA:2A:FD:9B:60:28:30:84:E1:CB:60:4C:EE
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F43285848C84BEE4FEC45E166B78F7B00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3283ff9c-17da-3aa6-8466-04396e8c63ef.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 36040
IP address blocks: 64.15.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:ee:4f:ec:45:e1:66:b7:8f:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=b1cbbc0b-e6b3-4c7b-8aa3-4e16466abcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:00:dc:1e:d2:9e:0a:9b:1f:5d:85:f7:d6:4d:
8c:2d:04:49:0c:57:c7:87:9a:32:95:dc:35:94:5e:
b3:a9:72:3f:cd:c9:d8:bd:0e:45:76:7c:fe:74:df:
40:3c:97:d2:72:9d:a0:6e:06:e2:82:25:3c:04:2d:
2b:32:59:52:70:97:46:3f:fa:81:43:c6:e0:ac:39:
30:69:36:c9:e7:66:27:2a:e9:b4:c7:d7:46:4b:f0:
a9:ec:4a:9c:3d:98:37:b7:c9:ae:25:63:c7:da:3d:
47:5b:2d:76:70:2f:9e:5d:9d:7e:8a:12:e4:ff:2d:
8b:ff:a1:24:e9:92:ff:34:20:a9:1d:ca:a7:97:a4:
46:f5:2d:e2:bf:5d:9f:0d:3b:2f:1c:7c:db:80:9b:
ff:ca:65:7c:0c:56:e8:a4:d4:c7:da:1d:5a:76:13:
10:b0:e4:ce:99:6e:97:a7:f7:18:e1:e8:cf:25:2f:
26:79:15:b3:24:7a:e0:61:0f:5d:27:3d:a8:36:a4:
26:cb:5a:06:95:d8:af:1c:76:e3:60:07:27:8e:3d:
3a:79:ff:d2:48:70:93:d0:41:cf:98:ff:8d:72:67:
ac:48:4e:91:83:20:c8:84:98:02:de:44:36:cf:8f:
b0:8a:0c:e8:f2:07:e5:54:40:7d:21:5e:4e:db:43:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:42:ED:F4:47:A7:D0:FA:2A:FD:9B:60:28:30:84:E1:CB:60:4C:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3283ff9c-17da-3aa6-8466-04396e8c63ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.15.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:73:e6:00:a1:b0:c9:01:53:39:cf:0f:52:d6:71:76:b6:63:
b4:11:ec:7a:7b:6b:e9:e6:a7:b3:7b:0f:79:fb:9a:2a:98:64:
4d:71:de:49:1b:67:5f:76:bc:72:bc:4a:dc:89:fb:78:1b:fc:
a0:60:e0:35:5b:27:8c:80:f9:98:2e:ba:e6:aa:01:98:f6:a9:
bd:5c:85:d8:e4:dd:b2:f7:c2:d5:97:d4:04:2e:e8:8c:73:47:
a3:12:83:30:22:67:be:66:3e:5d:4b:2d:58:32:1e:87:e2:64:
30:93:2d:85:08:87:18:9d:8b:41:40:e8:88:38:a5:4a:3c:c8:
c8:56:d4:c3:ed:93:58:a3:12:ec:5f:47:84:5f:a0:a7:db:dc:
9a:c1:b3:52:2d:0b:0e:1e:76:00:ff:e3:09:2a:a5:8c:45:75:
7c:6e:8b:71:a0:db:f6:c6:5b:13:0c:45:89:02:f6:d2:7f:af:
1b:5c:4e:82:54:87:b1:f2:bd:1b:2d:22:a9:d1:b1:70:da:9a:
be:e9:3c:73:e1:23:fc:25:37:df:b3:9f:20:28:75:44:bd:8a:
09:a2:e6:42:aa:47:d6:67:91:18:65:78:67:d6:53:90:d5:ff:
65:b8:25:cd:72:85:ad:46:26:ce:3c:13:43:16:4a:8f:8d:f2:
3c:b5:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:46 2025 by rpki-client