Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa
File: 829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa (raw, json)
Hash identifier: sWW6L4l0LEJZ0Rx0Uj5qrizft4Jx6bgnrgOnj3Guz7A=
Subject key identifier: BF:C5:FE:73:7A:6E:5F:3B:6E:62:1B:3D:67:EF:D7:D5:E7:D4:76:BE
Certificate issuer: /CN=4e84d19a-da77-4951-9413-0914c81e76e1
Certificate serial: 010D0C9F43285848D7494AB3CF6A7A7D1F094A80
Authority key identifier: C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa
Signing time: Mon 10 Feb 2025 22:53:21 +0000
ROA not before: Mon 10 Feb 2025 22:53:21 +0000
ROA not after: Sun 11 May 2025 21:53:21 +0000
asID: 8987
IP address blocks: 64.190.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:49:4a:b3:cf:6a:7a:7d:1f:09:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e84d19a-da77-4951-9413-0914c81e76e1
Validity
Not Before: Feb 10 22:53:21 2025 GMT
Not After : May 11 21:53:21 2025 GMT
Subject: CN=7795a5fe-42d8-452c-a380-55d29285224b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:39:de:17:2f:d0:50:77:df:e1:2d:71:1e:
9f:a9:ac:37:71:50:a6:46:e5:37:ee:10:9f:fe:ec:
c1:e2:44:6c:b8:b8:f6:2e:a8:1b:96:ad:7e:80:fa:
10:7c:68:e6:e3:16:8d:45:bc:c2:e4:64:52:cc:1c:
9d:7e:f2:15:cd:8b:73:ba:05:ab:83:11:24:9f:09:
90:db:7c:1f:6c:2e:d2:f6:ec:82:9c:a9:8a:35:d4:
0a:6e:f1:20:ed:08:df:d9:0b:37:a9:f2:13:fa:08:
38:b0:17:45:20:88:31:a9:aa:16:cf:40:48:a5:3f:
be:aa:7c:7f:5e:35:98:41:7e:7f:63:24:2d:48:2b:
45:b3:a7:84:01:88:6c:50:77:76:92:b6:9c:7b:4d:
63:f3:60:8c:96:8b:3b:1e:27:c4:48:24:2b:af:45:
08:c4:25:7d:12:5c:9f:4c:19:86:84:99:28:b5:9e:
99:7e:dd:9c:c9:08:5f:d8:94:76:97:8d:92:7d:e2:
9f:81:16:c2:7e:87:2b:74:a0:e3:5e:48:9a:97:13:
19:36:1a:07:da:e2:7b:6b:b3:a2:8b:3e:19:7c:26:
c8:ba:77:f2:c2:53:1e:6d:32:6e:39:0d:f0:a1:a8:
2f:88:5a:d1:27:d2:e3:ce:95:74:15:54:51:8a:37:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C5:FE:73:7A:6E:5F:3B:6E:62:1B:3D:67:EF:D7:D5:E7:D4:76:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl
X509v3 Authority Key Identifier:
keyid:C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer
sbgp-ipAddrBlock: critical
IPv4:
64.190.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:b5:7e:05:92:40:c8:cf:8d:ce:fe:47:bc:6a:19:85:37:45:
02:65:fa:fa:fa:5b:c3:d2:48:94:58:3f:37:21:95:b2:04:de:
65:d9:bd:28:e0:2b:16:a2:92:9b:b6:6b:c7:45:fb:d8:09:7e:
f1:8d:8e:e3:7d:ff:7f:c1:af:3e:ab:b0:67:87:cc:5d:8f:ba:
a2:76:7d:76:6c:14:59:f9:bd:e0:59:3b:29:4b:29:b8:50:3a:
72:93:1c:88:37:f5:4a:b5:de:84:67:e2:d0:35:0e:bb:a6:62:
a1:fa:f9:c0:f5:76:60:85:32:dc:ed:99:ac:2c:12:7a:4b:09:
86:76:ca:9e:cc:8c:2b:8e:fd:48:d4:9c:57:53:66:e4:a7:e3:
82:cf:ce:94:6e:90:8d:fa:03:6e:c2:4c:3e:4b:f2:1b:5f:45:
0e:bf:ea:2d:34:fd:9f:05:47:02:50:8a:f7:a8:51:17:d5:95:
84:71:50:80:6a:2d:51:42:0e:2f:5b:5c:f4:67:54:4a:fa:d9:
ce:0a:17:65:09:ef:1a:27:50:49:ea:1e:cf:aa:9f:d3:8a:48:
28:93:f7:06:51:d5:9e:74:76:75:44:9f:17:66:33:0d:7f:1b:
4d:e5:50:35:91:28:cc:c1:2f:a1:e1:d2:22:b7:cb:4c:8d:b9:
63:80:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:14 2025 by rpki-client