Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa
File: 8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa (raw, json)
Hash identifier: 1jqW+LrE39Sb6HXnvE+mKk2dPjFL2XWpLVmRzM+VJzk=
Subject key identifier: FC:A9:FB:BB:45:07:3A:58:BD:F4:AA:9D:D7:17:75:7A:8C:B6:FF:B3
Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial: 010D0C9F43285848E0065FE7673E81C2B61EE280
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 64.29.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:5f:e7:67:3e:81:c2:b6:1e:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=aa3aaf76-8390-4f2e-8c10-f36787b5dc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:55:31:96:76:ef:8e:38:9b:cb:30:a2:a5:
44:7c:97:b0:16:4d:26:cc:77:22:99:a0:b0:47:c7:
cc:c2:3e:83:df:be:f7:84:b8:be:b3:d6:62:b9:bb:
85:3f:b8:16:62:05:25:a4:94:a8:79:28:10:c8:fe:
24:81:55:de:7e:99:6e:4d:15:c3:fb:63:79:ff:20:
f4:b4:85:61:4d:64:85:d1:11:70:07:fd:a8:85:b4:
80:a6:7e:46:f9:1f:f3:2a:0f:ab:85:b7:92:a9:5b:
8f:71:92:36:f3:04:66:82:fa:7e:ae:c7:0f:2c:64:
34:9e:ac:f7:a5:72:e7:b0:82:7a:6d:61:b7:eb:c8:
29:84:a4:84:da:f3:d0:c6:23:3e:fb:b7:90:3c:74:
f4:dd:21:9c:fd:97:a5:c2:aa:ad:d9:fe:6e:da:4b:
70:2e:d1:60:65:34:d4:3c:5a:b9:76:2c:59:db:ef:
2d:36:4f:55:e9:19:99:ad:f8:14:fd:02:f2:fd:8d:
55:45:87:6e:45:73:2e:d3:d2:ff:8a:c6:a0:b1:cb:
3a:bd:7c:f6:7c:dd:fa:f9:c5:80:bd:6c:66:5d:91:
93:aa:77:3c:49:9d:13:23:94:3a:4d:95:60:9f:eb:
7f:e2:2b:46:86:c1:40:ba:0e:da:62:ef:9e:23:8c:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A9:FB:BB:45:07:3A:58:BD:F4:AA:9D:D7:17:75:7A:8C:B6:FF:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
X509v3 Authority Key Identifier:
keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dc:b9:e8:f8:36:46:30:0a:ef:b2:9a:18:1b:94:92:13:6e:20:
4b:99:76:39:db:e3:55:55:01:45:a3:b5:d7:b8:17:92:2f:a0:
7c:d8:df:16:5a:a4:fe:c7:08:1e:42:f0:aa:7b:c7:67:90:ad:
b7:f3:cc:ed:8f:47:90:5e:58:d1:b4:49:81:e6:28:41:3e:a2:
53:87:65:80:73:a6:e7:2d:79:44:eb:4f:67:72:7d:d2:f7:82:
45:14:fd:48:c8:f9:0c:4d:43:a1:74:bf:c9:05:ff:80:9f:8d:
a0:ce:9a:c5:c3:04:65:86:ef:a1:af:ea:c9:cb:27:e5:8a:4b:
66:23:27:9a:1f:b7:51:2b:50:0d:25:1f:0c:11:fc:0c:7a:19:
d2:38:87:de:3c:57:42:46:4d:8e:6c:a3:dd:46:05:a2:ed:3e:
ed:42:23:4e:70:9e:18:63:de:74:d5:9b:ff:55:71:5f:d1:3f:
1c:3c:7c:ef:c0:03:63:b7:b7:dc:3a:48:53:57:a2:1e:9e:ef:
84:8b:40:10:d5:f9:f0:f8:d7:b9:9b:88:f2:8a:ed:ae:ee:08:
8f:16:76:e0:75:20:6c:84:ce:be:50:4a:cc:dc:0a:a9:ff:c9:
1e:73:32:aa:b6:f8:40:1a:fa:c1:89:88:9e:f7:fe:cd:02:88:
29:a7:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:46 2025 by rpki-client