Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e5af689c-c7f7-3133-aaec-4d729c08b79b.roa
File: e5af689c-c7f7-3133-aaec-4d729c08b79b.roa (raw, json)
Hash identifier: oFXOce3i+E2Ir+6Fruwz+gkHEa13RM3m+ib2kcozeFM=
Subject key identifier: 10:D4:C1:9F:37:FC:D0:03:C7:BE:79:12:55:A3:73:75:59:C4:3B:53
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F43285848C84C04EFBBB343CA630A1C00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e5af689c-c7f7-3133-aaec-4d729c08b79b.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 36040
IP address blocks: 64.15.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:04:ef:bb:b3:43:ca:63:0a:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=7a3f7f83-a0e0-455c-8274-0d2fe22a561a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:6c:e3:dc:41:1e:b9:83:74:3a:d1:49:0f:
5e:75:8a:bd:98:60:d0:a5:f3:e7:b9:b7:48:44:2a:
76:56:ea:17:3a:be:80:cf:63:c1:82:6c:e1:b3:55:
1c:72:54:d0:cf:b4:67:8e:d7:9c:fe:14:44:11:de:
a8:16:14:54:91:91:0c:d7:ab:33:43:64:6b:7b:18:
fc:48:27:6c:3f:61:d2:bd:e2:cf:f2:a8:79:aa:6f:
30:58:9d:7a:4c:a0:08:02:15:a5:c3:5c:f4:72:3f:
87:0b:49:cf:04:9e:34:b3:14:5c:f4:aa:66:19:2f:
45:6a:80:fe:6a:d7:67:93:bc:6b:28:e5:e4:9c:c6:
f1:81:a1:18:52:6e:95:60:bb:a2:ab:51:d0:9e:03:
97:05:f8:9d:c6:dd:af:fe:bc:00:39:3e:a3:61:a4:
90:5d:ed:6e:c1:8e:b3:fa:60:50:d0:a7:72:f3:83:
d0:3b:b4:19:7a:3a:52:16:1d:97:a7:14:82:74:10:
46:67:0d:b9:a1:17:13:a1:45:e3:4e:a5:f8:d4:40:
2c:4a:49:d8:74:5e:3d:62:67:ab:96:a6:d5:90:a5:
fd:11:9a:26:a8:22:76:9b:bb:a8:63:90:2e:08:5f:
f9:80:1f:eb:33:5d:82:9b:5d:27:2a:a8:ac:63:c3:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D4:C1:9F:37:FC:D0:03:C7:BE:79:12:55:A3:73:75:59:C4:3B:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/e5af689c-c7f7-3133-aaec-4d729c08b79b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.15.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:d5:80:ea:d8:99:c4:a9:91:f7:c5:38:24:26:22:61:da:a0:
b9:f2:c1:d6:c5:e4:7a:5f:97:dc:b6:d5:94:f9:b5:63:df:c0:
16:ef:6e:71:95:fd:2d:36:a9:d9:48:83:b0:c8:d4:3f:f8:9c:
01:1c:5d:af:10:eb:48:60:f8:2d:4e:4b:01:6e:52:8a:12:a4:
7a:e3:f9:c7:2b:16:e8:8c:4c:9d:45:f0:5c:29:9b:c5:cc:a5:
6e:85:e2:5c:ad:73:a5:2e:87:e9:5c:6d:ff:46:48:68:42:55:
c2:73:38:d4:a8:b3:23:fa:0f:db:64:31:96:3a:c9:6b:eb:fc:
17:65:a6:ce:fb:19:09:81:94:7d:07:84:89:e7:44:87:af:74:
00:07:2f:35:cc:d1:37:c8:ac:74:7b:b6:b2:88:18:b1:5e:50:
dc:ff:1a:f3:66:6d:30:de:64:46:d3:2d:87:82:d8:92:b7:cd:
5b:16:2c:50:2a:87:28:f1:be:98:be:d1:18:86:db:21:3d:8d:
98:ba:a7:b8:69:a5:6c:39:e3:51:2e:a7:a0:0f:bc:c2:33:82:
90:a3:1f:1f:36:56:7a:f9:b9:f6:1a:72:3a:4a:21:a2:e3:a1:
bf:ca:d2:44:2a:5c:2f:02:57:c4:8f:cf:9d:72:22:56:a9:1a:
54:f8:1b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:40 2025 by rpki-client