Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa
File: df938649-fe0c-3f68-86dd-87b8933d0a23.roa (raw, json)
Hash identifier: mHu4OHIycLKrpGXcWvlyZqJFC2HFTKydTf7EKC5lRWQ=
Subject key identifier: 8A:49:42:90:4E:CD:FE:99:2E:0C:CB:5B:D7:A2:21:E6:78:9D:82:D5
Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial: 010D0C9F43285848AF2B7F406E611E0C26DD1E40
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 36352
IP address blocks: 64.20.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:7f:40:6e:61:1e:0c:26:dd:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=2c6cc86a-64f6-41c5-a566-0925a1c5c6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:c0:69:54:c1:9a:d4:a2:13:b9:d2:17:f4:
cf:15:97:3f:b6:cb:1c:21:7b:d3:9e:b2:42:30:e6:
10:80:0a:c6:d4:75:93:94:d1:bc:a1:1a:2e:f8:6c:
5d:f9:c5:46:d9:d4:d3:6c:e8:8b:96:ff:5f:a2:62:
e2:7b:dc:ce:86:82:f0:d4:39:4c:97:74:b7:2c:64:
c7:bf:78:40:11:92:ec:3a:9e:04:4a:70:cf:68:1f:
4f:f2:2b:29:1d:05:c9:1a:00:29:04:4c:44:c6:cf:
bb:32:df:fb:8b:e9:59:8d:c0:c9:29:75:ad:15:75:
c6:fc:39:c7:8e:f5:20:53:4e:0b:14:f1:9c:40:4a:
95:b0:3a:ce:c7:27:2b:36:94:7d:81:b6:12:c6:44:
17:bb:b9:f2:03:3f:20:f4:63:d1:b2:92:10:08:6f:
94:a6:5c:10:8c:af:3f:51:4f:84:03:7f:96:75:dd:
1f:4d:0b:13:74:b7:eb:3d:bf:58:f6:73:b2:0b:12:
b7:4f:1a:dc:b7:2a:22:4e:f9:1d:38:c6:0e:8a:9d:
26:fa:d3:83:b3:31:53:7b:18:99:3d:af:cb:df:07:
fb:08:47:e8:ec:7b:5d:1b:3c:d3:15:32:8b:00:5c:
d1:36:20:be:e2:87:5f:14:ea:36:de:68:62:59:1a:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:49:42:90:4E:CD:FE:99:2E:0C:CB:5B:D7:A2:21:E6:78:9D:82:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
X509v3 Authority Key Identifier:
keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
sbgp-ipAddrBlock: critical
IPv4:
64.20.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:8f:11:30:d9:7b:2f:94:86:32:7b:6d:25:22:9f:6d:1e:7c:
82:80:28:ee:ff:71:13:35:8e:52:5a:15:9c:2a:1d:19:4b:a0:
c1:a6:8b:2c:3d:f3:bd:ef:ef:1e:6c:ee:84:99:c7:67:11:a3:
d1:0b:b7:18:96:cc:15:ac:bb:12:78:d7:26:50:25:43:9b:2b:
9b:d0:f4:d2:ac:a5:51:66:b7:76:ca:2f:8c:5e:97:92:24:49:
6f:37:44:ea:b2:f3:3a:a3:95:d4:66:2b:c7:f7:38:2e:84:17:
0a:bd:8e:5c:f3:d8:e2:f5:d3:4d:c0:71:64:fe:c4:b9:87:34:
34:0f:b9:6f:9d:95:bd:f7:d3:5a:32:51:cd:6a:9d:41:c1:73:
15:66:96:53:e9:59:78:02:a7:9c:38:18:47:ff:d6:b6:d5:da:
40:b4:fc:6a:38:e7:22:5b:71:5b:9d:1e:09:74:7f:ef:99:29:
10:a9:45:99:1b:28:c9:a7:4b:cb:bd:4e:40:4d:37:c6:53:29:
e2:ef:9f:cc:22:6c:9b:77:ed:cc:cf:33:8c:5b:62:6d:62:d5:
bb:e9:99:e3:c8:65:7f:8f:d2:0c:ef:c9:f9:c9:ce:83:4e:fd:
9e:3f:28:14:b2:42:a6:8d:50:0c:0c:1b:9f:2d:d8:5c:b5:82:
9a:38:2f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:17 2025 by rpki-client