Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa
File: 01b562f0-b1c7-3eae-99a1-f153b793addc.roa (raw, json)
Hash identifier: NwiQSerMAzpOpr3q/HWrZcoh8i+uMLLDkOistzSGFKU=
Subject key identifier: 2E:52:3F:9A:46:0B:BD:12:76:5D:74:57:2D:CB:EC:CA:FF:2F:2F:5C
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F432858492CB217504BBD0E03BA51DD00
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 13768
IP address blocks: 64.34.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:17:50:4b:bd:0e:03:ba:51:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=fe2a60c5-bafd-4ed9-8000-31ae82f9ede3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:68:f4:db:20:39:f2:13:d0:a1:b8:3a:61:
08:76:51:d9:ec:d9:49:3f:b3:8a:ea:a9:76:ae:72:
94:63:5a:2c:dc:41:85:53:98:3d:99:f0:3f:57:b0:
ea:78:ce:10:8a:b6:d2:3c:1c:aa:8c:95:42:59:f9:
73:1a:3c:b7:06:29:51:12:39:01:71:2d:35:9d:65:
88:8f:c4:65:db:32:b9:6b:ba:be:7b:7a:26:05:86:
68:5e:a8:2d:1a:52:97:0d:ae:a4:6c:ca:46:40:d8:
b2:02:65:dc:c3:82:7a:26:f6:5a:1a:6e:7e:4c:3c:
e3:7a:5e:38:ff:3a:28:9a:b6:a7:8c:d8:1a:cc:b5:
b2:d0:6d:cd:f9:d3:7e:96:2a:98:7c:14:90:cd:00:
95:28:05:f1:d0:9d:14:e6:18:80:f1:78:a5:e7:db:
f4:94:b3:0b:99:12:08:21:46:7a:20:04:84:00:43:
7f:ce:f1:d0:b9:1c:f2:47:21:a9:f3:60:f0:58:23:
20:11:89:c4:82:2d:ca:ea:b4:f0:40:83:1e:73:82:
fc:c7:63:55:39:a3:4b:de:39:23:65:6a:b8:2e:db:
6a:2e:92:02:49:8c:cc:50:f0:0e:6b:d8:01:62:74:
b8:a6:22:8d:f3:37:9e:f9:7b:4d:21:49:17:db:89:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:3F:9A:46:0B:BD:12:76:5D:74:57:2D:CB:EC:CA:FF:2F:2F:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.34.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:3f:5b:3f:14:79:f8:35:56:6d:c1:fe:fc:8c:d3:11:87:87:
0d:a9:0d:fa:64:f1:fe:ef:24:7f:df:26:93:c7:02:b9:94:a9:
a2:1c:44:71:0c:d8:2b:ce:b0:b1:0f:2b:3e:cf:31:68:95:64:
86:67:af:08:ad:e9:ce:9f:21:86:53:1c:53:87:82:4d:7e:c7:
97:cb:0e:8f:f7:ae:cb:81:c0:6b:fc:ce:a3:ba:96:e6:24:df:
0c:03:7a:23:c1:a1:f1:bc:e4:b6:4d:54:b1:65:c4:2e:94:bd:
f2:a4:a3:28:16:5f:95:1a:97:5d:f9:7f:93:35:17:a5:1a:52:
a5:fe:cd:24:8b:bf:95:4a:13:0c:b9:e9:6f:1b:67:58:2f:df:
52:51:cc:72:dc:93:8d:56:98:6a:9a:30:ca:8a:51:9e:b3:20:
e8:da:d2:b4:4d:30:6d:11:45:3b:25:58:b9:66:1b:17:8a:07:
1a:c1:4d:52:63:33:51:62:0e:3f:a5:9a:ec:d5:8e:c9:12:26:
bf:a5:6a:ac:02:1c:1b:af:10:96:3b:d5:df:77:75:28:3f:84:
e3:12:94:56:82:37:28:35:bf:36:c9:ee:ad:e2:06:8d:57:ae:
45:66:dd:83:08:f0:04:c3:a0:fd:0a:a3:7c:8b:d0:dc:83:25:
98:b4:67:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:13 2025 by rpki-client