Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f4c187f2-baca-3860-86dd-aea2ea0787a9.roa
File: f4c187f2-baca-3860-86dd-aea2ea0787a9.roa (raw, json)
Hash identifier: Ps7SmPbKRDdPzMftUFivcayeypJzDEyfbl8BXsoLNLY=
Subject key identifier: 31:40:86:DB:5B:77:8C:D4:0A:4E:90:F1:77:0E:08:D0:DE:71:85:30
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848F49EC83CA7D044E835E0E700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f4c187f2-baca-3860-86dd-aea2ea0787a9.roa
Signing time: Fri 21 Feb 2025 11:04:03 +0000
ROA not before: Fri 21 Feb 2025 11:04:03 +0000
ROA not after: Thu 22 May 2025 10:04:03 +0000
asID: 30036
IP address blocks: 97.64.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:9e:c8:3c:a7:d0:44:e8:35:e0:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 21 11:04:03 2025 GMT
Not After : May 22 10:04:03 2025 GMT
Subject: CN=74d1cf94-7b79-4574-853b-3b6ef18d02e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:2e:0f:46:5f:d4:89:02:f8:73:9b:4f:d1:
1d:b3:dc:de:49:d6:00:6c:c0:22:85:50:da:02:43:
63:4e:d0:8f:b2:86:30:00:e6:38:7f:25:aa:2c:d0:
a8:f5:d2:dc:98:cc:10:63:e2:9e:df:88:3c:3e:90:
00:28:27:77:50:78:2a:90:1d:8d:0b:b9:cc:ef:6c:
d9:bb:97:e4:94:7d:d4:f1:5f:a7:f7:56:1d:0c:a5:
b7:8c:1f:64:a5:de:81:fc:0a:d2:8e:0a:1c:28:6d:
14:03:fc:93:fc:7a:3e:90:0c:de:87:74:1a:19:84:
b3:81:b4:44:52:a0:fd:40:4b:8c:b4:f2:0e:e9:5e:
ad:b2:bb:fa:34:4a:94:6d:51:ef:eb:ce:08:0d:30:
26:40:d4:9c:aa:2c:27:15:da:f1:fb:bd:76:37:14:
97:89:53:d4:11:84:d0:2c:d5:ae:aa:e7:1d:7e:7e:
ef:12:9e:16:2a:fa:cf:9b:a6:7c:a3:7a:fa:b3:b8:
31:b8:7f:2e:6c:d4:85:4b:cb:f1:cd:40:69:19:c9:
3e:46:c1:95:85:2f:fb:af:05:e3:b6:60:7e:3e:28:
b5:ad:03:80:22:db:43:59:cd:48:76:74:10:5a:8b:
81:49:69:c5:14:2d:fc:f0:26:46:98:9d:d7:5f:b1:
53:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:40:86:DB:5B:77:8C:D4:0A:4E:90:F1:77:0E:08:D0:DE:71:85:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f4c187f2-baca-3860-86dd-aea2ea0787a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:71:a6:27:27:12:3f:27:38:da:e1:ae:34:e6:0d:c1:35:36:
85:9f:d8:a5:79:6b:cd:7a:65:8e:f2:15:e2:88:c3:c8:24:98:
c8:5b:ce:72:91:10:ed:1b:60:1a:99:bd:9c:6b:5e:40:fd:9a:
1a:46:8c:53:21:10:23:2d:bd:08:ff:4c:02:80:9b:60:21:7e:
99:f3:d6:54:44:5d:5c:2d:72:23:da:78:bb:a5:2c:c8:0f:04:
35:05:37:fa:fd:c9:22:ce:c2:4c:d6:04:c3:67:d0:74:9c:7b:
50:4f:89:4d:ea:c1:40:7f:29:3e:2b:be:39:86:2f:24:6d:50:
a0:ec:58:2d:8f:bb:4f:fd:d7:f6:a6:03:fc:d6:1b:79:62:5f:
37:2d:4c:bd:e2:87:95:30:ec:06:61:4a:8e:6a:a7:87:22:f9:
6c:b5:85:f6:04:0e:33:4c:e6:ea:1c:f2:cf:a1:f9:67:5f:01:
51:8b:e8:fa:cc:0f:73:0b:8e:d0:ff:c8:4f:1a:4b:dc:94:02:
6f:85:d9:ac:35:f5:21:32:b5:26:5e:a7:f8:9d:3a:63:a6:d2:
8e:64:57:d4:cb:7c:4c:62:3f:79:65:65:57:4a:b5:d5:c0:db:
0c:2b:e3:3e:df:cd:04:0e:65:be:38:6d:e9:48:54:63:a3:be:
81:09:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:23:11 2025 by rpki-client