Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/9dd7edb0-7c10-3227-be45-1e2253494e5e.roa
File: 9dd7edb0-7c10-3227-be45-1e2253494e5e.roa (raw, json)
Hash identifier: nFJQcYefbkW5y25wsvrMJtpOcToE9U/ycREUiYRjIlU=
Subject key identifier: F5:BD:11:2C:46:6A:97:00:57:43:54:4F:32:F8:3E:B4:23:87:4A:EA
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F43285848BE863452E093B838FF6AF720
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/9dd7edb0-7c10-3227-be45-1e2253494e5e.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 5650
IP address blocks: 64.79.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:34:52:e0:93:b8:38:ff:6a:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=4a416d11-8f84-4676-b76c-de170e079d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:34:b3:b8:fc:33:ee:da:3d:1c:d5:ff:8e:49:
8a:2e:a5:1e:c0:8a:0f:b0:53:27:69:b9:b5:6e:17:
84:07:14:6e:a7:4c:3e:9e:09:a3:4f:31:bd:88:d2:
89:86:fc:90:ee:9e:0c:4a:cb:f5:29:ff:07:14:60:
39:f0:ed:ef:e0:57:59:5e:2e:e4:69:7a:9e:24:84:
8e:53:eb:04:bc:48:e0:64:5e:41:b4:9b:7f:86:7a:
55:09:7c:8e:84:0d:6f:d9:c1:2a:78:d3:59:20:8a:
12:42:1e:02:55:c0:29:47:8a:0a:a6:95:6c:11:8c:
0d:78:c2:6a:9a:fe:3b:89:fc:95:bc:96:d6:cd:86:
ae:d1:b9:ed:37:a2:71:4c:3a:37:82:51:cd:af:c0:
5a:7a:79:95:8c:ed:8f:db:b0:b4:33:2a:57:45:1b:
fe:e7:16:1d:81:e7:c2:ce:19:a3:d8:f8:c8:66:92:
5f:46:d4:bd:22:ed:3a:93:f6:e9:02:3d:b4:f6:04:
73:25:88:e9:5b:f6:6c:f0:8b:f6:13:e9:bd:01:a6:
ea:24:14:dc:50:22:eb:79:e3:89:31:a8:71:29:36:
ea:90:ea:cc:24:55:e4:95:16:9c:1d:a1:27:69:68:
4b:c2:78:df:af:39:9c:89:2a:63:c9:0b:12:60:99:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BD:11:2C:46:6A:97:00:57:43:54:4F:32:F8:3E:B4:23:87:4A:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/9dd7edb0-7c10-3227-be45-1e2253494e5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
64.79.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:2c:7a:4a:88:23:ba:f5:44:db:5a:c4:98:d6:c8:f3:43:3c:
07:5f:d6:9e:20:ff:4c:5a:93:9f:28:03:7c:1f:f3:f8:0d:fd:
61:2a:f2:9d:4a:07:c8:ef:77:1d:17:c0:b4:fa:88:1b:2f:d8:
cf:28:da:30:b0:01:f9:d6:84:bf:74:25:84:56:39:94:57:1e:
97:5d:6a:29:05:89:98:4b:bf:68:49:05:45:88:52:94:bb:81:
eb:24:5c:a1:c7:63:9f:d2:bb:ff:3f:27:80:4c:0e:78:4f:3c:
c2:0a:bd:38:e9:f1:8b:57:b6:0d:2a:a9:af:14:a1:ae:d3:9e:
52:2d:5f:6b:37:1c:9f:8a:39:4f:4c:1d:60:fc:95:22:1a:b7:
be:72:85:bd:a0:2b:5f:29:4c:1d:af:79:cc:36:a8:1b:02:ee:
27:2e:c3:86:e5:2b:4f:db:34:b9:08:47:44:54:41:74:bd:a8:
fd:93:ac:95:5c:f7:ff:69:00:c8:5b:8f:d6:8f:68:5e:83:22:
38:6c:b9:ae:11:62:1b:94:74:bd:54:b1:0a:ba:86:65:10:16:
8a:3b:92:33:7c:0d:1e:49:ba:fa:c5:f2:89:94:c7:73:4e:b9:
66:f9:2a:cf:a4:d8:4d:2d:b4:d2:87:99:34:b0:8e:96:bf:79:
d2:81:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:05:21 2025 by rpki-client