Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/bc353fe3-9c6f-392f-bf75-22c347775fd9.roa
File: bc353fe3-9c6f-392f-bf75-22c347775fd9.roa (raw, json)
Hash identifier: Mr3kpV6wdDiNiJvLFtViQ/L3sKSj/RnjtxXJkYr/OY4=
Subject key identifier: 1B:8E:7F:EF:E7:09:42:AD:26:D0:AF:44:D6:73:C9:CA:51:9C:8D:B1
Certificate issuer: /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial: 010D0C9F4328584957F4052D619B23F30FA23520
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/bc353fe3-9c6f-392f-bf75-22c347775fd9.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 21713
IP address blocks: 66.172.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:05:2d:61:9b:23:f3:0f:a2:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=b6b0f533-0433-4ed1-8681-13e21c5253da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:f7:a5:2d:fd:1e:96:d2:40:76:fe:22:80:
5d:cd:35:a9:3c:e9:21:26:81:ec:5e:12:03:60:c5:
6b:ad:5c:49:90:68:ae:d3:a5:65:47:0f:b8:31:3a:
90:00:98:c2:a7:b8:0f:dd:9a:be:74:06:a7:83:d9:
6f:19:9a:98:1e:23:66:ab:7c:ea:06:a5:5f:e7:0f:
be:9c:7e:c8:af:92:4f:8b:f9:07:f4:e3:83:b2:ca:
9a:05:6d:ac:90:c7:2d:b8:d2:64:e9:ed:be:41:cd:
bf:f9:be:23:58:c7:f9:15:75:46:73:94:5c:13:de:
0a:df:0f:39:a3:30:02:9c:ac:8c:ec:6b:8d:b0:43:
d1:7d:f3:0e:e6:09:a7:9d:4d:bf:54:ba:23:46:4c:
90:05:e1:be:72:9b:27:4f:21:d9:3a:e1:dd:8f:20:
6f:d3:0a:37:b3:1c:7f:d4:25:d8:84:8b:ed:fe:71:
bb:76:d3:8f:26:36:e4:3b:11:63:0e:7a:9c:a9:6d:
c7:89:81:a4:3f:c7:dc:a2:47:e9:b3:f6:74:08:a2:
15:5d:75:41:1e:b9:19:72:77:38:7e:a2:ea:f5:3d:
69:2a:1e:f0:d5:d2:d1:23:d8:b5:19:09:4d:e5:05:
0c:bd:be:03:08:2c:c1:9a:b0:ca:bd:e3:58:6b:7e:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8E:7F:EF:E7:09:42:AD:26:D0:AF:44:D6:73:C9:CA:51:9C:8D:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/bc353fe3-9c6f-392f-bf75-22c347775fd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
X509v3 Authority Key Identifier:
keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
sbgp-ipAddrBlock: critical
IPv4:
66.172.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:42:cf:04:b6:79:a8:64:d1:cd:96:87:7a:69:2c:e8:40:1a:
1d:7d:80:82:cb:e6:55:38:0e:25:06:b4:4f:bb:3e:4f:de:a5:
9a:92:76:da:37:42:47:9e:b3:fd:2c:4a:b6:31:7f:f6:30:50:
b7:f1:d4:80:d7:bf:fb:71:00:41:c6:9a:31:86:12:99:84:53:
c2:29:14:66:3f:dc:cf:10:0e:f5:85:f5:ff:85:38:52:74:e8:
be:1f:e6:45:be:54:d1:3a:9f:3c:2e:42:6d:82:06:f6:89:96:
78:20:37:7e:cf:45:a9:cc:8a:1d:02:ee:68:15:89:69:33:e5:
58:c1:0a:ec:3f:46:ed:51:e6:8c:30:59:33:76:49:f7:f5:af:
09:e0:6e:fc:70:f7:94:00:16:bc:db:c6:4f:7e:ff:1d:4e:d6:
93:62:fb:c2:ac:7f:d0:e0:42:0c:7c:e7:a3:58:d2:25:ba:60:
22:55:7c:60:27:3b:d3:17:42:da:a5:54:ab:ba:8b:e9:cf:68:
9e:39:18:3c:a3:3e:e4:2e:ee:ed:9b:df:b5:7a:25:08:6c:a0:
3e:b2:ae:b8:34:52:78:e5:6d:b1:ba:ec:ba:dc:89:dc:c9:a4:
fd:24:f9:ba:3d:d9:4e:a0:10:a6:f3:db:cd:f1:9a:25:3c:b1:
cb:6c:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:51 2025 by rpki-client