
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/843317a2-294c-3284-83c8-9e6a60866a59.roa
File: 843317a2-294c-3284-83c8-9e6a60866a59.roa (raw, json)
Hash identifier: X4siH58pkGem9zyWX9Hvu/4XLPAxOw+TzU8kef/fS90=
Subject key identifier: 36:A7:4F:30:8A:E4:8F:E3:97:6A:09:C4:CD:5E:6B:0F:62:81:7E:7B
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F43285849393E75CD41B5A71EFA42E4C0
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/843317a2-294c-3284-83c8-9e6a60866a59.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 18594
IP address blocks: 64.57.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:75:cd:41:b5:a7:1e:fa:42:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=3531d22a-8bdb-4af5-b3ab-a0b322045c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:25:67:24:2c:1c:2c:6c:6d:d0:4a:66:18:e6:
af:fb:8a:0f:08:79:48:32:09:14:12:cd:68:a5:7d:
3d:fc:a6:6f:54:cd:0a:1f:85:19:68:2b:7d:92:5e:
53:1b:4d:53:87:2f:13:35:53:14:5f:48:5d:47:f0:
e5:f3:ca:9b:4b:7f:e4:f1:30:61:41:bd:0c:70:89:
02:29:cf:be:19:aa:bb:85:40:ff:e8:1e:7d:33:05:
aa:30:96:79:f5:81:04:6e:49:91:9f:59:a5:97:05:
85:04:84:b7:e2:8f:b1:50:38:d9:a6:19:24:6d:40:
14:2e:33:3a:79:9c:35:ab:0f:8d:93:91:d1:74:6e:
17:db:6b:13:ea:f3:a8:86:f2:4d:02:b8:c8:77:44:
36:09:e3:76:2e:5e:9e:43:db:18:59:a2:2b:0c:41:
84:64:a0:24:f4:7e:8d:5c:11:a4:01:c6:bd:e6:72:
a9:5d:40:95:64:9a:89:c4:56:9d:6b:2b:5f:04:2c:
ad:fc:cd:8e:60:36:85:1e:15:bd:af:05:e0:68:84:
a9:c1:5f:59:f1:35:44:a8:86:52:18:1f:60:af:3a:
9c:2e:50:f3:70:ba:24:d9:55:33:b5:10:bc:a5:54:
cb:f2:d2:52:35:0d:ae:4d:17:18:84:44:d2:20:9a:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A7:4F:30:8A:E4:8F:E3:97:6A:09:C4:CD:5E:6B:0F:62:81:7E:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/843317a2-294c-3284-83c8-9e6a60866a59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
64.57.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:23:7a:38:9e:ea:1c:e5:44:fc:5d:85:94:ba:16:f2:74:aa:
5c:44:52:fb:d8:ba:71:34:9f:d7:28:c8:e1:9f:44:01:d4:90:
db:9a:6e:d1:96:16:06:9d:1c:9d:02:76:9e:04:16:c1:e6:4f:
40:31:8e:f6:4c:f5:2c:3c:98:de:17:98:52:3a:76:e9:18:b2:
57:10:12:47:57:48:26:a7:5e:52:70:9e:82:e8:19:9f:82:5c:
a2:f3:e2:6d:89:08:b6:64:72:40:ac:ad:8d:b3:0b:4c:b3:45:
e7:53:b7:24:05:e4:fa:0b:b0:2c:62:b9:67:da:18:22:7f:f2:
44:cb:5c:38:2c:f9:f9:b8:4d:ed:0a:e8:9b:b1:58:5a:1e:c3:
5f:a2:7f:a9:ef:d1:3d:44:66:b8:3d:85:b6:3e:38:cc:10:64:
0a:3a:01:b0:da:e8:d1:a8:40:06:e8:e8:61:07:45:52:85:a4:
7b:3c:e3:62:12:f8:6e:f6:0e:81:4d:e4:d1:a8:d7:ba:4a:20:
b9:7f:4e:13:49:d1:4f:2f:18:c6:f7:d5:8a:71:ee:59:cb:09:
36:fe:77:d3:b5:c3:dd:95:49:16:99:de:2f:ba:55:4c:54:6a:
16:f1:cb:73:c3:51:33:e4:85:a8:ea:14:4e:e4:e3:af:8a:44:
02:ca:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:26:22 2025 by rpki-client