Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f4f5e6ca-cdf7-3784-8bb6-7e35fcd932f5.roa
File: f4f5e6ca-cdf7-3784-8bb6-7e35fcd932f5.roa (raw, json)
Hash identifier: PkHQOxniQuJBxhJrMyZh9179fjo7cDsRlAf8UnpX2+w=
Subject key identifier: 94:F1:6B:09:AF:3C:E1:EE:29:F7:25:1B:1B:9C:98:DF:F1:5B:C7:A0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB60F664FA9625106BEE40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f4f5e6ca-cdf7-3784-8bb6-7e35fcd932f5.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397241
IP address blocks: 64.6.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:60:f6:64:fa:96:25:10:6b:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=cd6aca82-402a-44bc-915a-170b68c22508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:8e:3a:85:19:f6:8b:75:a9:92:04:ed:1e:
72:f8:a7:fc:34:78:f2:3f:00:b1:19:6a:39:8f:be:
de:71:6a:5e:f6:55:56:62:ca:33:49:05:9f:65:7e:
55:35:03:18:11:e5:1c:cb:5b:d0:8b:66:31:22:b1:
6b:10:93:d1:66:c8:29:a6:4c:90:03:21:14:39:16:
11:8e:c0:28:73:ec:54:3f:f1:ed:ee:11:e5:7a:76:
b8:f9:0c:64:17:22:fe:aa:36:a2:50:eb:bf:fd:52:
f7:4d:f2:3f:23:ae:43:cc:15:d3:29:af:d9:e9:a9:
cc:ee:65:69:d6:3d:4b:cb:a9:58:07:ab:9b:67:33:
0d:4e:c5:5f:f5:dd:df:67:c9:94:ec:bd:ac:3b:38:
bd:09:d7:61:28:d9:e2:10:84:f0:90:5f:9c:02:63:
8c:7b:27:bb:01:fb:15:b4:d3:11:e9:4c:ce:52:f8:
7e:90:76:e8:25:3e:5b:41:88:94:da:37:15:5b:16:
3f:6a:65:c8:ae:c6:e4:fe:4e:90:cf:ab:ca:f0:05:
72:09:5c:e1:b8:5d:36:ad:01:27:0c:47:f8:7f:91:
7a:a0:e0:7a:79:ac:c8:9d:be:33:a8:6f:6d:ea:6b:
dc:29:ce:6b:a8:7c:17:45:10:3b:35:f2:c5:ae:04:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F1:6B:09:AF:3C:E1:EE:29:F7:25:1B:1B:9C:98:DF:F1:5B:C7:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f4f5e6ca-cdf7-3784-8bb6-7e35fcd932f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
64.6.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:e4:3d:cb:9f:9a:c5:fc:fd:78:6a:a8:e4:6d:0f:fd:d2:2c:
5e:4a:ac:b3:b1:82:24:98:5a:65:e3:4d:c4:7b:67:e4:a0:24:
75:6a:e5:e4:6a:95:8a:6b:df:fd:82:b7:50:06:68:7d:1c:19:
2b:0a:56:f4:de:82:f6:b3:0c:b8:44:3e:34:ce:5c:7b:83:1c:
00:8d:0a:5b:33:35:ff:1d:98:51:cd:f3:f1:68:7d:97:e0:10:
de:ac:7e:a1:05:d0:b1:2b:f0:c1:73:6f:27:62:40:5c:f3:44:
dd:bb:a2:d3:fc:1b:b4:55:cc:9c:51:cc:0b:4e:cb:3c:31:b2:
bf:d7:47:1c:e1:8d:a1:ef:a8:21:6b:93:d4:a3:08:10:4c:3d:
c9:41:63:eb:21:99:77:48:ea:e0:d6:5f:ac:1a:98:1d:ac:7e:
0c:a7:4d:c3:29:57:b6:72:1e:e5:67:44:59:23:c1:88:88:bd:
ca:c3:d3:80:4a:f4:65:47:b8:70:73:3c:de:0e:11:52:80:32:
c5:eb:44:49:00:72:81:2d:cb:67:4a:5f:67:86:1d:2c:9d:ab:
af:66:8c:f4:51:4b:89:30:57:b0:38:1a:93:04:4c:08:df:5d:
84:f5:05:b2:52:20:7e:29:39:f1:ce:7c:3e:a6:53:f3:82:11:
d4:57:4f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:30 2025 by rpki-client