Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d15cae68-2cc2-39c9-985c-92bc1c44b78c.roa
File: d15cae68-2cc2-39c9-985c-92bc1c44b78c.roa (raw, json)
Hash identifier: KGE3hMXy7D1xIW+HwVnx4pJUtRoAdR17Zrx6PDLOKOk=
Subject key identifier: C1:8F:51:21:6E:42:65:70:79:D5:6A:D7:BF:A9:7A:EE:80:F9:DC:CB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D2112DFB921B9B893530DE80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d15cae68-2cc2-39c9-985c-92bc1c44b78c.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 26914
IP address blocks: 64.179.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:2d:fb:92:1b:9b:89:35:30:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=7675d102-c68c-4ef3-9d39-87043793ec71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1d:27:02:e4:4e:0c:e0:7c:99:b8:e2:08:23:
d1:1b:df:9f:f8:1d:a8:27:0e:a9:7d:4d:b3:44:10:
6f:82:83:5e:00:96:48:e4:23:aa:76:8d:e6:84:c5:
ba:1c:44:22:f2:96:54:7d:63:51:6f:4c:e7:47:ff:
94:12:c1:ab:ab:08:cf:7e:31:93:87:a9:21:4a:9a:
a4:bb:db:9d:87:08:85:ed:c5:36:6b:7b:a2:19:69:
44:15:93:e3:60:e0:b1:e6:8d:9f:07:de:5e:62:03:
f9:19:f2:5d:98:8a:42:47:f9:1b:9a:38:f8:e0:50:
65:b2:e3:62:0f:f9:3e:69:33:1d:ff:57:8c:5c:72:
a5:ae:f1:1b:f0:dc:17:59:43:44:6c:4b:95:26:75:
32:c2:25:88:99:a3:ac:21:35:4e:9c:bc:98:e6:02:
fd:7e:11:3d:9b:d4:5b:be:a0:38:82:a0:ef:57:45:
16:aa:4d:37:09:10:52:41:14:14:cb:39:c6:57:7f:
33:61:39:53:8e:20:6a:e2:a1:15:fb:d8:d1:93:7e:
3f:0e:b1:8e:17:42:f3:65:c7:3c:52:0a:2a:24:3c:
30:eb:5b:02:4d:72:93:ab:50:c1:84:68:18:a4:80:
73:58:f6:89:c8:c8:f5:0d:da:ad:d8:21:94:9a:ab:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8F:51:21:6E:42:65:70:79:D5:6A:D7:BF:A9:7A:EE:80:F9:DC:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d15cae68-2cc2-39c9-985c-92bc1c44b78c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.179.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:12:b4:2e:1a:4f:4f:49:ed:44:b0:04:9b:e1:a4:c4:a4:dc:
0f:dd:e6:fb:17:21:ed:96:15:64:06:01:53:51:c3:e5:21:70:
ac:0b:8f:8a:85:d8:0c:5d:fd:df:78:6a:b9:96:20:49:3c:41:
10:fd:df:d7:a1:d7:fd:48:2f:5b:f9:89:96:96:96:17:01:ea:
45:cc:6f:a5:03:f2:1e:4f:50:b8:9d:0c:18:72:3d:63:02:0e:
48:86:18:f9:db:f5:8c:54:c5:78:93:a4:de:1f:c9:c3:25:59:
98:0c:1c:69:56:5a:de:e6:74:65:da:4b:32:3f:c6:f0:84:e8:
0a:54:42:cf:4c:34:6f:ba:8a:20:12:20:5d:fc:a2:59:15:14:
b4:e4:62:0e:72:e3:6c:c1:a7:b0:43:d3:88:e7:cf:12:32:6b:
6f:6b:96:9d:d8:df:97:49:dc:a8:67:9c:6a:04:85:57:0d:ed:
c2:0e:19:54:b5:97:da:66:24:68:1f:9c:0f:f7:eb:7c:5d:d7:
46:b1:97:f4:84:d7:74:f2:ae:5e:ba:5e:b6:08:fd:b3:d9:6e:
c0:81:64:21:88:f2:63:c9:58:18:4b:c4:a1:84:f2:c5:ae:1e:
14:de:5f:f1:e2:b6:4c:f5:63:61:e6:d2:cb:7b:13:aa:59:df:
42:d4:ad:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:45:34 2025 by rpki-client