Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/aa09b2d6-2ea8-3336-8d9b-31681094c753.roa
File: aa09b2d6-2ea8-3336-8d9b-31681094c753.roa (raw, json)
Hash identifier: xXexUzfh9Xipd/2j32kYNNrVtcLugygM9A5lFKmo8Ns=
Subject key identifier: 8E:3D:7C:A4:6B:32:F3:52:D6:9F:0A:D4:44:34:68:DA:D2:69:10:41
Certificate issuer: /CN=76c188c9-4fff-4233-9a69-35e66734774b
Certificate serial: 010D0C9F43285848530AF1040CEC5D803AE1C600
Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/aa09b2d6-2ea8-3336-8d9b-31681094c753.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 33651
IP address blocks: 64.84.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f1:04:0c:ec:5d:80:3a:e1:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=58a68bb0-5e3a-47c8-8ba9-55b3676948c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9c:ec:45:b1:0e:59:67:60:20:a0:b9:ea:c0:
49:8f:f9:de:5b:c2:a2:90:54:c0:fe:f8:37:bf:99:
34:dd:85:bc:6a:c8:8e:e1:13:1d:07:d0:4d:ae:24:
8c:2f:12:9a:1a:84:0a:4d:96:38:57:3e:a9:05:c5:
46:fc:e8:51:e6:69:99:a2:6a:92:6a:de:a0:08:1b:
cd:94:68:f5:99:69:47:c2:02:5a:ee:db:b5:ef:61:
82:18:43:3d:a7:e9:5f:cb:89:49:07:c1:fd:ae:56:
77:96:7d:0f:d9:98:92:43:58:2a:51:04:cd:94:c9:
39:35:d7:fa:5a:a2:de:bd:76:83:d5:cb:b2:ab:e8:
d3:ad:3d:1c:d6:82:df:ce:b4:16:34:e7:ed:83:c5:
53:24:27:ea:32:42:e5:08:4b:e6:cb:60:d1:1b:e4:
18:78:37:04:fd:2f:81:09:ab:c9:b9:27:1f:f1:87:
f8:d1:f2:fb:4f:c7:48:1c:92:b8:0b:7a:32:92:f1:
89:9c:f8:d5:51:52:99:17:1d:92:bc:9a:a3:ff:b6:
32:4a:22:d2:7e:ed:4b:cb:1f:9a:c3:28:39:6f:d6:
33:3c:8d:0b:03:cc:43:c0:cb:13:1b:60:a1:4e:14:
ec:fa:1a:51:bd:de:22:4f:0a:0b:d9:d5:22:2e:8d:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3D:7C:A4:6B:32:F3:52:D6:9F:0A:D4:44:34:68:DA:D2:69:10:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/aa09b2d6-2ea8-3336-8d9b-31681094c753.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl
X509v3 Authority Key Identifier:
keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.84.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:ae:15:41:7f:33:fe:94:89:a3:1c:30:d6:33:10:56:76:e0:
22:b4:1c:ed:7e:24:fc:77:1a:1f:d8:3d:d6:d1:fa:9d:56:03:
bf:eb:d5:13:98:df:cb:b4:a6:bf:43:95:3b:aa:1e:f4:9b:fa:
80:64:53:af:84:7c:e8:af:31:3f:a1:38:a9:16:c2:43:32:8b:
a0:53:66:f0:24:71:68:18:c2:40:f5:19:7b:4d:c1:bf:5c:18:
0f:e9:d8:2d:0f:f1:ae:79:6f:a4:45:98:fc:1a:1c:48:98:17:
5f:d5:18:2d:af:9a:93:ae:7e:10:20:a4:2f:0a:e0:22:98:9e:
64:db:26:4b:08:eb:89:42:28:cd:28:b9:49:23:fe:86:7b:b4:
b0:79:54:c2:1c:fa:6d:85:3f:a1:e8:ad:a9:76:eb:18:bc:4b:
8a:16:7e:d4:0d:37:60:db:10:3a:09:ff:59:da:72:f2:08:45:
ed:0e:c9:5e:3b:bf:78:b1:0b:c1:be:8f:90:6a:df:ce:db:57:
ad:4d:d0:a8:13:fe:e5:2b:f3:fa:19:18:cf:c0:b2:f6:eb:e7:
f8:e9:d2:ba:b5:10:96:b0:3e:96:33:a6:14:dc:24:af:53:f8:
7d:58:0d:93:38:ee:aa:87:44:65:17:15:d6:b4:e7:4f:65:46:
b6:a1:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:42:58 2025 by rpki-client