Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa
File: 5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa (raw, json)
Hash identifier: C1gkErFAG3KORQ7r9ILY1XDrxfdj/WvxZVdKL5Ud+ik=
Subject key identifier: 99:BE:DE:5C:7B:43:DE:77:38:80:7A:1B:AA:2C:CC:F3:4C:DA:22:9B
Certificate issuer: /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Certificate serial: 010D0C9F432858488AE0A174F7EE7583FAAE5F50
Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 64227
IP address blocks: 50.20.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a1:74:f7:ee:75:83:fa:ae:5f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=65e47071-6a86-4839-a467-6b6c2213ea7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:01:a4:39:57:c8:91:a4:9c:7b:8f:33:27:
ad:55:28:a8:b1:08:ba:45:4e:6b:27:19:e8:3b:e5:
36:b7:fa:0a:d7:e8:60:5d:53:6b:6c:58:1f:15:e5:
00:ef:6a:c6:d5:4a:d3:3b:3c:58:21:80:af:b4:c1:
37:3f:4e:4a:64:c2:37:5b:66:0a:8a:a9:24:26:83:
61:33:81:91:90:04:ad:93:9f:e1:b1:e2:f3:f9:42:
1b:4c:50:9c:80:20:67:3e:e0:3a:08:0f:c6:bb:7e:
13:a8:5d:53:b1:7e:33:e9:b2:49:f6:6f:fb:8d:4c:
fc:d7:44:49:a5:af:6c:68:ef:ee:ae:5a:1d:f4:ce:
41:f2:da:9f:58:07:4a:65:ef:ae:35:69:e2:e3:ac:
b6:11:1a:23:5a:e9:cc:25:4b:5d:51:2a:d2:75:7f:
a2:fb:5e:4c:4a:8c:22:0d:3b:e7:3a:8e:fb:3c:35:
30:d1:3e:e2:1f:80:4f:69:f2:0b:93:0a:94:51:29:
fc:12:a0:b5:12:c8:d6:18:cf:ce:f8:46:00:4c:95:
ba:4c:5c:bd:37:92:6a:c0:6d:85:74:01:da:43:18:
8a:46:87:94:06:b9:ae:ce:1e:a1:1f:fa:e6:7f:6e:
8d:ec:b3:0b:05:ae:4a:eb:48:24:96:27:4e:64:3d:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BE:DE:5C:7B:43:DE:77:38:80:7A:1B:AA:2C:CC:F3:4C:DA:22:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl
X509v3 Authority Key Identifier:
keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
sbgp-ipAddrBlock: critical
IPv4:
50.20.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:9b:51:17:de:3e:04:6d:a7:3b:5e:5c:29:d4:c1:4d:17:00:
07:dc:2b:eb:df:c6:3a:ec:6b:71:fb:36:0c:4e:39:65:4f:a1:
6c:ef:12:e6:bc:c2:f4:7c:34:50:96:e7:8c:b1:8c:1e:99:08:
c5:51:7f:c0:83:34:8a:6f:5d:f4:65:50:ba:02:f6:da:3f:6d:
1d:51:e0:09:a4:f5:91:dd:fb:63:44:d1:cd:b4:1d:58:d6:2e:
0b:29:11:09:d9:13:07:80:6d:a4:2e:59:97:1e:ec:97:04:39:
69:41:32:b4:0f:25:41:f5:c1:43:3f:bc:c1:2b:4a:35:49:07:
13:1d:93:6c:c8:09:a2:a7:bd:c2:6f:18:ad:e8:7d:46:38:4b:
94:61:75:c7:da:0d:3f:c0:bb:0f:61:9b:ea:78:46:7c:61:62:
2f:ed:59:6d:54:66:4a:1f:bb:df:46:6a:2d:36:5e:b7:3e:c1:
49:f7:a5:25:69:b7:f9:a3:08:13:f4:9f:b9:8e:3a:f4:74:a7:
e2:29:d6:cb:04:5f:2a:68:d7:c6:8c:ab:91:6b:da:35:0d:69:
31:fd:a2:35:3b:cc:1e:7d:02:04:7c:7d:3b:ec:74:a1:93:9b:
7e:0d:b7:68:c3:3f:c5:d9:60:ae:c0:65:ff:e3:62:94:fa:74:
12:be:90:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:37 2025 by rpki-client