Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7c35db4-b546-3afa-b7f8-c6a30377f483.roa
File: b7c35db4-b546-3afa-b7f8-c6a30377f483.roa (raw, json)
Hash identifier: EpYImOnveyG2xXpG6iCuN2Kni7luYEKcIMMQV25p/LY=
Subject key identifier: 6D:FE:FE:85:44:C9:8A:17:3D:3E:D8:76:C2:AE:19:95:5B:7B:B8:60
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C580FF8B9872EFB900208300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7c35db4-b546-3afa-b7f8-c6a30377f483.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 67.54.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:ff:8b:98:72:ef:b9:00:20:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=5b811af2-00dd-48fa-824c-23bb026d4776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:eb:cd:9a:f2:2a:db:4b:0d:b9:11:73:dd:eb:
3e:77:06:4f:78:67:25:9b:43:4e:a5:1b:11:a7:e6:
db:4c:fe:57:ea:7d:49:b3:a9:c8:16:d8:7e:1f:38:
15:96:a3:f3:25:d9:59:3c:66:44:42:97:26:78:ec:
e7:00:07:d1:89:c5:51:fc:b4:e9:31:84:cc:2c:4d:
d0:90:8f:c3:74:63:fe:a6:4f:57:56:b0:17:84:c0:
c1:25:7f:57:81:52:59:a3:a3:08:0a:b4:d6:71:be:
35:e5:3a:88:6a:a0:e5:a1:60:c0:d2:ae:b4:ad:20:
cc:cc:9f:71:0f:f6:db:c0:b6:52:2b:09:30:ac:b2:
7e:c3:64:0f:9d:19:8e:0b:4a:4a:33:36:57:fd:f3:
3a:1d:fe:96:67:19:c9:75:fb:25:11:7d:48:ff:5d:
00:c4:33:54:e3:92:d2:0d:62:00:a9:32:ec:1b:28:
1e:e9:ba:e6:2c:16:87:13:ef:84:1c:42:f9:a5:5f:
99:27:66:8f:b1:c6:f5:c3:b3:ce:e8:e3:6d:0d:a9:
e5:e4:aa:a7:17:ba:cd:5d:c3:8f:44:bc:42:35:ad:
a0:a0:fa:eb:c8:d7:56:db:bf:cd:63:87:9c:46:45:
d5:bd:4c:a1:f6:5c:06:3c:be:0b:89:c4:f0:93:8a:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FE:FE:85:44:C9:8A:17:3D:3E:D8:76:C2:AE:19:95:5B:7B:B8:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7c35db4-b546-3afa-b7f8-c6a30377f483.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:bc:c0:8f:d1:48:ba:f3:ef:a3:d7:64:bb:14:70:1d:bf:0c:
0c:f4:2c:1b:41:7d:db:1f:51:f6:69:87:7f:46:ad:83:d3:c5:
bd:01:a6:cc:d8:63:5b:76:e8:df:cf:51:44:d8:26:7b:31:c7:
6c:06:d1:04:70:d7:c6:cb:e2:ce:fe:fe:6c:7c:f6:e6:9e:e6:
64:0e:6d:5b:f4:89:f7:99:a6:76:9d:52:21:a3:a3:dc:e8:71:
64:aa:7d:13:80:c8:59:c2:6b:03:0e:e2:d4:58:2b:1e:b8:10:
9d:b8:93:fd:d8:b8:87:73:be:f8:37:57:14:73:04:0f:52:e1:
85:6e:37:06:2d:05:05:73:ac:8a:20:dc:fc:36:65:c5:45:f1:
b6:18:28:41:4a:7c:1b:b9:6a:3f:a5:ad:56:5b:ee:a2:72:98:
2d:4e:7d:7f:fd:61:5b:92:42:df:4f:cc:3a:b2:22:29:ba:04:
39:c2:20:7c:10:2a:c6:34:c9:1f:59:8e:1b:73:4e:5c:f7:85:
e7:ca:1e:4b:a8:f8:16:f7:78:f4:84:58:30:fe:59:71:71:ae:
78:19:9f:2b:a4:61:ca:4a:61:bb:4a:13:a6:c8:a7:06:ac:39:
d3:5e:24:bf:52:c9:a8:dd:98:0e:40:2a:99:51:6a:0f:4f:94:
3c:44:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:18 2025 by rpki-client