Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cb157db1-a6e4-3149-8906-d8026fa5ef41.roa
File: cb157db1-a6e4-3149-8906-d8026fa5ef41.roa (raw, json)
Hash identifier: b4BCaGVixvGzAsAKGX4w6dyLH9vpUb2XdvxZa41N5bw=
Subject key identifier: 14:E4:97:B6:E7:6E:84:BE:1A:E8:12:6A:CB:39:B3:84:8A:9F:DF:02
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F432858489770910D0246F6576819D1C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cb157db1-a6e4-3149-8906-d8026fa5ef41.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 13768
IP address blocks: 64.226.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:91:0d:02:46:f6:57:68:19:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=8398a671-6456-4bf6-bcf5-d8e0b9336c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:29:24:15:34:91:a7:e5:fc:d6:14:c5:65:
0f:05:4a:83:51:cc:ff:00:63:0e:73:65:a7:de:ab:
88:bf:47:16:36:31:76:70:59:b6:88:9d:b5:bd:c3:
4e:66:77:01:a3:a4:c3:c7:79:92:94:94:2d:29:1d:
89:76:4a:af:d8:64:72:1d:53:8e:a0:d3:09:f9:83:
5a:04:68:73:ab:73:d9:76:94:bc:df:15:97:ee:f7:
e9:10:fb:80:74:09:17:36:06:7b:a6:17:32:fe:76:
20:b3:67:70:6d:96:0d:89:80:33:96:9d:50:1e:c3:
e4:d8:89:b0:2d:2d:68:09:96:52:c4:2f:b8:ab:8a:
93:6b:df:9e:e5:b0:64:c8:e2:c6:96:52:5a:18:d1:
4f:26:31:a2:20:25:51:b3:e9:2c:62:5c:3f:cf:a2:
1b:2d:ae:87:f7:01:1a:43:18:f7:27:54:eb:34:df:
11:e4:c3:50:88:cb:fa:e7:4d:74:6d:52:2f:9e:20:
2d:45:58:94:0d:84:dc:82:f6:16:09:14:7a:0a:c4:
38:b4:65:49:7d:93:37:db:6b:8e:a5:20:5b:33:28:
1b:33:8e:e2:1e:17:e2:05:eb:fb:42:cb:37:df:b5:
b3:85:a8:19:5c:b0:c3:ff:d8:d4:82:43:9f:86:3d:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E4:97:B6:E7:6E:84:BE:1A:E8:12:6A:CB:39:B3:84:8A:9F:DF:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cb157db1-a6e4-3149-8906-d8026fa5ef41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.226.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:18:31:a5:a0:c0:f6:ff:09:69:71:9b:57:06:a7:a4:c1:cd:
f2:f3:96:20:0f:2a:b0:f0:1d:4c:75:e7:ca:bd:83:cc:b6:dd:
ae:0d:56:53:8d:25:af:f3:c6:ed:58:fb:be:3a:78:bc:1f:c0:
4c:f8:fb:33:a1:92:3c:b9:39:cd:25:71:eb:b0:31:81:2b:53:
64:22:71:e8:27:4c:ce:14:32:22:9d:aa:36:b5:8e:b0:ea:30:
ac:55:48:f1:9a:4d:95:2f:55:65:a0:21:b7:6a:40:13:72:df:
cb:5c:e4:16:97:14:bc:8b:d3:a1:be:5b:ef:c1:09:60:76:4d:
3d:dd:3e:fc:6a:36:88:a9:33:7c:64:cd:1f:a1:69:1a:69:61:
5d:5a:62:95:6a:7b:cd:87:e4:f3:25:de:99:50:6e:45:b7:d8:
95:49:9b:3b:88:77:9e:50:68:ee:40:c5:24:9d:af:ad:e4:42:
11:f4:58:d4:14:be:88:a3:bb:cf:33:13:65:aa:ee:e2:dc:b2:
39:08:cd:54:03:95:5b:ba:d6:40:7a:ef:3e:75:88:41:97:55:
0f:e9:fb:35:1a:8b:cd:74:5c:1e:62:e0:9b:8d:d1:fb:d1:9e:
c9:38:f0:26:31:7f:6c:49:71:0c:a5:3c:c9:7b:53:6c:1e:d4:
b0:72:86:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:29 2025 by rpki-client