Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/3a019076-b464-3583-90a4-8ee571e8d49f.roa
File: 3a019076-b464-3583-90a4-8ee571e8d49f.roa (raw, json)
Hash identifier: cEvrHc7esJ8xSOdx4iHgSxjxm5eNfHBVWExL37jpKjk=
Subject key identifier: F8:8D:97:36:FE:4E:95:F4:10:82:1E:3F:99:72:A9:13:72:21:EB:37
Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial: 010D0C9F43285849350EAED0B6E7921E6FF8AA40
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/3a019076-b464-3583-90a4-8ee571e8d49f.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 393474
IP address blocks: 64.90.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:ae:d0:b6:e7:92:1e:6f:f8:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=5a4194f0-ae01-4686-b145-26725b5373ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:ea:07:70:e1:ad:21:17:bc:ae:f7:de:04:
b7:69:da:36:f6:4e:38:75:df:dd:de:23:5f:6f:a9:
7f:dc:c0:e0:56:c9:b6:ec:6c:5c:01:eb:a4:62:3b:
bf:19:92:79:42:35:3c:af:fd:41:18:06:0a:01:38:
aa:02:6b:0e:18:c5:54:1b:ae:0d:1f:3c:22:10:90:
ec:3f:89:a1:40:5c:8c:e1:f4:5f:eb:7e:ba:53:46:
30:b1:a2:45:6e:a6:4a:fa:d7:dc:56:d9:f8:bd:31:
cc:77:bc:37:48:0a:a0:cb:fc:a9:16:6c:59:a4:dc:
5c:e3:f2:f3:44:d5:12:7e:21:e0:d7:cb:d0:fa:80:
a6:0e:2d:70:23:ce:51:bf:57:73:ab:6e:02:69:7f:
43:78:66:fc:9f:5a:84:ae:23:a6:63:0b:e8:fa:38:
38:6e:96:52:e1:af:5a:a7:e1:d3:13:42:73:ff:78:
71:39:4d:8b:62:57:e6:07:0b:55:ac:80:21:61:20:
92:b3:0b:e2:36:69:ae:5b:e5:45:90:65:6c:c2:2b:
c5:aa:fd:ec:c7:cc:0c:dd:67:36:75:cd:3e:95:a3:
12:1d:4b:ae:ac:55:9c:ec:fe:bb:43:22:e1:43:85:
b4:72:62:38:fd:6e:21:1c:7c:2d:69:e8:99:0f:d8:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8D:97:36:FE:4E:95:F4:10:82:1E:3F:99:72:A9:13:72:21:EB:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/3a019076-b464-3583-90a4-8ee571e8d49f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
X509v3 Authority Key Identifier:
keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
sbgp-ipAddrBlock: critical
IPv4:
64.90.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:c3:77:65:50:1e:cc:05:ca:16:c1:ac:a0:5e:2a:a4:2d:1b:
8b:34:2d:fe:ec:5a:52:0e:a1:36:c4:99:04:f4:59:85:52:37:
2f:93:11:41:71:bf:2f:f3:15:0e:8d:f3:72:34:20:62:0d:b6:
31:d9:7e:c4:82:33:fd:72:ef:90:72:52:e6:06:30:9a:7a:6f:
b0:0d:fc:d2:f4:5a:c9:a9:23:15:b8:65:37:d7:c9:22:a8:a1:
ef:b9:8b:90:38:84:46:ff:5c:96:c3:bb:94:6a:db:bf:10:05:
c3:09:ca:b2:8b:89:3b:a1:4b:f5:d3:35:bd:a7:42:d1:ba:f7:
64:10:50:7f:fe:e7:c6:98:d3:06:d3:a4:33:2f:c8:11:ce:61:
fe:15:f8:81:40:0e:df:85:f8:91:27:b2:ea:0e:14:15:9e:7e:
84:4e:f1:bc:1e:b0:6b:61:5d:ce:b0:25:94:f6:d7:c6:fa:a1:
79:5a:f5:2d:4d:e4:e9:ca:de:10:5b:24:e7:15:ec:6f:fb:a8:
87:3c:cd:45:d4:bd:bd:37:88:30:f8:63:68:92:af:a8:1d:da:
3f:82:7a:81:c5:67:f7:7e:a5:f1:18:cb:df:7c:66:3b:12:97:
75:87:4d:11:3f:bf:0b:ff:00:1b:eb:20:2d:c1:4a:87:c8:b7:
ba:e2:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:51:45 2025 by rpki-client