Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/d9f1ac03-5c2e-379a-b3e5-edb0a9db9dda.roa
File: d9f1ac03-5c2e-379a-b3e5-edb0a9db9dda.roa (raw, json)
Hash identifier: I6nZd2X6HgqfR2Il0poxcbLyIeVcwmnwGEzzEuI25lI=
Subject key identifier: 80:FF:C9:44:54:00:21:8C:C8:3A:F9:17:0C:DA:11:6D:CA:DE:11:61
Certificate issuer: /CN=1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee
Certificate serial: 010D0C9F43285848BBBB7FCE28790488DC9ABC80
Authority key identifier: E7:90:0F:90:F7:AC:34:57:52:82:55:FE:14:E5:FE:A0:AB:18:E2:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/d9f1ac03-5c2e-379a-b3e5-edb0a9db9dda.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 4261
IP address blocks: 69.64.0.0/20 maxlen: 20
173.237.224.0/20 maxlen: 20
216.135.64.0/19 maxlen: 19
2605:8000::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:7f:ce:28:79:04:88:dc:9a:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=8542d5b2-e667-4885-8b08-8eecd3218e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:cb:86:84:03:97:4d:9e:48:56:3f:ec:3e:
b5:3e:73:22:f4:8c:43:a9:7f:d5:75:f3:ce:fc:97:
76:f4:f0:61:48:f4:27:d3:c4:35:04:d3:9b:88:6b:
68:29:18:77:39:93:e7:c2:2c:5c:34:1a:97:a3:79:
9f:b1:21:81:91:c3:0f:43:9e:07:96:1f:df:dc:bb:
83:5d:92:d6:39:2e:38:32:08:47:92:88:c6:2b:d8:
3a:db:0a:eb:cc:cc:60:06:9d:da:04:2a:d4:5c:af:
a6:b3:c2:d6:99:1b:8a:90:ab:92:85:fc:79:a8:da:
6d:72:bb:a4:01:0e:ac:39:88:cf:0c:66:e9:9d:77:
a5:d9:52:38:47:09:64:e8:a9:41:ee:d7:a6:e1:0d:
a2:25:73:e3:9d:af:6f:cf:e5:fd:70:c7:6a:4c:8d:
c9:ce:78:38:04:37:07:a3:e5:40:a2:f6:28:88:6e:
1c:58:18:c2:05:c7:39:bc:b1:22:32:b3:29:56:8c:
f5:98:2e:17:25:8c:fd:5f:26:6e:4b:11:67:6b:4d:
2d:0f:b9:70:5a:19:58:fe:6b:a8:86:3c:fd:0b:6f:
4a:74:71:ec:1e:6c:2c:34:fe:68:f6:b1:a7:64:29:
01:b4:05:fa:3b:38:fe:4d:fa:4e:4d:23:93:ac:e0:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FF:C9:44:54:00:21:8C:C8:3A:F9:17:0C:DA:11:6D:CA:DE:11:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/d9f1ac03-5c2e-379a-b3e5-edb0a9db9dda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.crl
X509v3 Authority Key Identifier:
keyid:E7:90:0F:90:F7:AC:34:57:52:82:55:FE:14:E5:FE:A0:AB:18:E2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.cer
sbgp-ipAddrBlock: critical
IPv4:
69.64.0.0/20
173.237.224.0/20
216.135.64.0/19
IPv6:
2605:8000::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:fb:63:eb:a7:68:42:d0:6b:f1:57:cc:5d:dd:b9:38:fe:f4:
c7:85:fd:24:87:9a:ed:66:8e:60:e3:22:26:05:a0:39:20:b1:
f5:e3:5a:74:69:80:43:d1:76:eb:3d:a3:aa:b6:df:bb:d3:9f:
fb:a8:76:ac:6b:b9:4b:a2:c6:a6:ae:4e:a6:05:87:16:6d:9d:
3c:70:cf:36:86:af:56:34:3e:1b:58:bb:8b:e4:5b:45:cd:66:
da:55:d3:44:c1:5b:09:b6:6a:6a:eb:7b:50:d4:95:d8:a6:59:
38:b2:74:e6:d6:e1:f7:0b:bc:f5:94:f3:95:a1:f5:09:9f:e2:
bb:26:00:98:3f:31:95:8e:93:ee:e3:3c:12:80:ab:1d:51:b7:
b3:17:ba:a9:1f:9b:c6:2b:ea:76:5b:5f:17:78:39:71:6a:ad:
ff:fa:e0:3b:94:8b:ec:22:b9:7b:52:c3:4d:ba:99:9c:c5:da:
07:10:ea:91:71:fa:67:79:8f:7e:e0:11:4c:9c:9b:8d:5f:8d:
55:6a:2c:5a:65:1a:f2:ac:f7:ee:ff:dd:cc:1a:62:cc:5e:a1:
13:56:b4:9b:dc:36:8d:2f:a3:61:cd:8b:c3:88:e1:24:f1:20:
59:81:5d:ce:1c:f8:f4:ab:1d:d0:ad:19:aa:61:c4:80:7b:0f:
3a:0e:82:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:35:41 2025 by rpki-client