Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/bd22376a-0063-340a-9389-87a8253b2735.roa
File: bd22376a-0063-340a-9389-87a8253b2735.roa (raw, json)
Hash identifier: dIb0iEMvFdaAJ4P2u581izaromJRy/P7soiAosmobsE=
Subject key identifier: 94:BC:20:E1:47:FF:A3:60:37:0F:9A:CD:FF:E2:E0:C3:7A:16:FB:41
Certificate issuer: /CN=5ba0e189-b778-475a-a7e7-ea67bb4d43c2
Certificate serial: 010D0C9F432858488815E529A8C61F0655DA7600
Authority key identifier: 74:D0:81:3E:8E:4A:C0:D4:9B:5E:D6:74:81:CE:FC:55:54:E5:70:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/bd22376a-0063-340a-9389-87a8253b2735.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 46154
IP address blocks: 169.197.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e5:29:a8:c6:1f:06:55:da:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ba0e189-b778-475a-a7e7-ea67bb4d43c2
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=93670a54-9ac8-4355-bb90-ece87d1225f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:98:92:99:99:b7:ef:5b:46:24:08:2d:9a:e5:
48:02:f7:a0:37:f6:54:fb:30:04:37:f8:f5:98:54:
f7:4d:35:45:3a:68:d2:87:ac:d5:0a:a9:95:d6:af:
31:88:2a:8f:36:a2:b2:5e:80:a8:8a:e4:90:ae:39:
96:91:8a:7d:d8:9c:44:e0:f0:77:47:fd:a0:b9:7d:
70:9d:35:4b:f2:2e:69:b0:d0:5a:ca:67:66:30:85:
8e:68:81:d6:9f:f2:c7:79:4e:88:96:bb:08:03:17:
da:d9:98:fb:4e:74:7f:3b:1c:48:05:db:9a:98:0e:
c5:cd:f9:18:8f:d9:db:8d:df:85:8b:5c:51:e6:f6:
6b:b6:b0:87:91:7e:3c:10:b8:c4:c4:43:e3:00:78:
5b:50:f8:db:2e:59:00:d7:b7:a2:83:ea:10:74:a3:
4c:9a:20:33:9c:f4:27:10:7f:f8:8d:70:0e:86:26:
2e:a7:c9:fc:02:33:e1:63:5b:fa:66:42:ee:7c:c4:
b3:68:c3:cb:fa:f3:51:05:40:aa:3e:e2:65:47:fc:
5b:15:bc:57:f6:b1:d1:73:20:21:4f:53:dd:07:15:
9b:55:83:9e:99:75:40:bc:6f:b8:f5:98:26:d7:bd:
fe:20:d9:c3:1e:4f:79:93:11:6c:0c:93:95:2c:46:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BC:20:E1:47:FF:A3:60:37:0F:9A:CD:FF:E2:E0:C3:7A:16:FB:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/bd22376a-0063-340a-9389-87a8253b2735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.crl
X509v3 Authority Key Identifier:
keyid:74:D0:81:3E:8E:4A:C0:D4:9B:5E:D6:74:81:CE:FC:55:54:E5:70:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5ba0e189-b778-475a-a7e7-ea67bb4d43c2.cer
sbgp-ipAddrBlock: critical
IPv4:
169.197.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:be:05:43:86:69:5e:0f:29:c9:79:9e:f4:47:0c:dc:39:20:
ac:a6:bc:b6:88:5d:b2:99:08:b3:93:a7:2f:3b:dc:e0:05:04:
a7:eb:31:6d:7a:c8:ce:ff:49:92:e8:2c:fe:eb:5d:7a:2e:84:
f8:9a:ee:aa:0e:ba:ae:4a:b2:81:1e:74:f6:e6:6e:31:ca:63:
d3:3e:cb:7d:9f:9b:0a:45:07:2f:a4:b2:8b:ce:80:15:ac:e6:
75:17:4d:01:26:3e:b4:0a:56:ef:15:21:32:27:f0:2f:d4:8e:
7b:47:b1:3c:de:4d:53:bb:55:ae:da:db:d3:72:72:88:82:fd:
86:0a:e9:4d:2d:0b:46:03:19:44:40:bc:0a:5c:92:50:d9:2d:
22:0b:e9:84:6b:7a:c0:b9:ca:49:6c:c9:20:b8:56:a5:2e:59:
b2:3c:c2:72:b0:05:db:90:d3:17:ec:a8:65:10:ff:e2:3b:05:
bb:6b:7e:9d:4a:b7:63:25:26:be:3e:e6:19:54:55:da:c3:ee:
3a:e8:20:b4:00:4c:23:5b:f3:aa:a7:f1:01:f9:c2:3d:07:af:
5a:93:0b:af:e7:5d:b9:8c:59:06:dd:50:99:6f:b5:e2:19:d1:
b9:41:3c:c8:6d:5b:81:a1:74:e4:18:92:09:6a:77:04:f0:ec:
c0:8f:9d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:55 2025 by rpki-client