Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d908c7a-8b9d-3d83-bb3e-4a416a73f266.roa
File: 4d908c7a-8b9d-3d83-bb3e-4a416a73f266.roa (raw, json)
Hash identifier: TIgFYCEdXblKr6+kPGR/A03ealq2UYZ0vuULqsPdnpU=
Subject key identifier: 66:0D:38:99:B3:05:7F:9E:B0:9F:16:F1:29:7B:64:BF:33:7D:7A:3B
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848F1E2D2BC9B85C0595AB1A000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d908c7a-8b9d-3d83-bb3e-4a416a73f266.roa
Signing time: Thu 20 Feb 2025 11:33:43 +0000
ROA not before: Thu 20 Feb 2025 11:33:43 +0000
ROA not after: Wed 21 May 2025 10:33:43 +0000
asID: 30036
IP address blocks: 97.64.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f1:e2:d2:bc:9b:85:c0:59:5a:b1:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 20 11:33:43 2025 GMT
Not After : May 21 10:33:43 2025 GMT
Subject: CN=af9df3b8-587d-4abb-adba-982fc8f3edbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:01:9f:12:bf:9f:fa:05:88:f4:5b:36:a0:35:
24:f2:18:27:18:42:f6:37:c7:65:2d:2a:e1:a3:66:
37:c6:fb:79:7b:51:f0:14:6a:dd:0e:e1:16:73:fe:
6f:7a:2e:f1:c2:89:ab:87:7a:d3:16:70:01:bd:cd:
ab:6f:68:83:f4:eb:7c:62:bc:19:fb:93:e6:70:91:
9d:b0:55:46:15:a4:20:22:e1:c6:cc:9d:0b:ac:e2:
a9:16:88:f4:a4:7e:b2:ca:d2:ec:c0:ba:9f:0f:1f:
58:5c:73:63:ed:8b:f6:9b:ab:81:24:4b:40:a2:d2:
95:ae:da:b5:9d:0c:03:40:d5:1a:01:ab:89:7a:3c:
ef:76:29:64:09:26:1d:6a:2b:02:5c:bd:6a:1b:a5:
d9:04:d7:a7:66:ca:55:5d:c4:b8:6e:41:e2:49:c4:
06:d8:8f:9d:ee:27:e4:6d:41:a7:6b:de:3f:0d:10:
f1:67:63:ae:36:71:ae:c5:ea:ca:e7:d2:f0:be:49:
7e:35:22:98:59:e2:4e:9b:37:fe:4a:99:09:22:79:
13:08:44:fe:b9:fb:86:52:bf:69:22:01:1e:5a:35:
ce:3a:14:04:05:99:3f:7b:1a:3e:2d:81:ba:5f:73:
8d:d0:26:ef:26:9b:73:5f:84:87:a6:f6:15:e7:90:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0D:38:99:B3:05:7F:9E:B0:9F:16:F1:29:7B:64:BF:33:7D:7A:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d908c7a-8b9d-3d83-bb3e-4a416a73f266.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:11:d3:e6:fa:1b:cb:e7:75:6f:fb:5f:d7:0f:36:2f:88:12:
be:50:0b:83:31:95:27:c6:cd:61:9f:ef:c7:aa:51:cf:6c:79:
40:76:71:f3:d6:97:b5:15:57:f1:c4:78:4a:de:54:dc:98:36:
95:80:54:b1:a0:0f:dc:44:c7:33:cd:c8:94:6e:94:aa:2f:3b:
0b:d0:76:31:fb:d4:e6:46:d8:43:c5:34:83:2b:0e:50:09:c6:
9b:92:17:8c:6a:53:9d:c7:2c:e8:68:d7:24:dd:98:d7:b7:6a:
74:dc:f2:30:19:0a:0c:85:21:8b:47:7e:20:05:7b:c4:7d:5d:
4b:56:94:ba:a6:44:55:7c:98:52:e9:a1:47:91:bc:24:83:af:
93:7c:47:43:c3:69:01:cf:15:06:87:26:69:b5:43:f0:c6:d8:
3d:5f:88:fd:0a:66:cf:d3:9f:d6:cd:2f:50:b2:a8:c1:52:8d:
9b:80:6b:8e:6e:4c:49:aa:61:63:26:02:ba:74:b3:15:fe:0f:
1e:31:de:db:b2:5d:9c:bb:f1:0c:44:ac:1c:96:57:d2:77:67:
c3:c9:03:01:82:36:c1:71:28:6b:ce:4d:71:f7:56:43:73:6e:
61:f3:9c:81:28:f2:60:7c:08:c3:a0:61:33:8f:08:57:5a:c5:
3e:7f:64:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:44 2025 by rpki-client