Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d5252638-980a-3822-84c8-9f64b45c72d3.roa
File: d5252638-980a-3822-84c8-9f64b45c72d3.roa (raw, json)
Hash identifier: PQ3Yagsa6nM1jzVqtOZFjkXfJzD9ST8eCzWtmku4jNU=
Subject key identifier: 41:41:C7:DF:7F:25:3F:F5:DE:4F:E5:B5:E9:99:68:3C:FA:19:89:04
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848EF616BA09E10E267AE1B8240
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d5252638-980a-3822-84c8-9f64b45c72d3.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 30417
IP address blocks: 64.124.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:6b:a0:9e:10:e2:67:ae:1b:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=45c15b7d-5333-4549-88ab-b030a28e1767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9f:a2:aa:85:05:1a:19:cb:5c:b5:5d:1b:fb:
5d:8b:82:29:85:29:23:c4:15:00:ab:36:7b:8a:d2:
8a:6e:1c:bf:47:be:e0:10:e1:3e:01:6c:23:30:b4:
dd:75:be:0d:a7:50:9e:1c:84:9f:a7:34:40:b0:b9:
b0:3c:82:06:d4:ba:2c:5b:86:34:0e:c1:9e:98:37:
cd:6d:cc:d5:dd:bc:29:a6:9a:03:2b:40:3f:47:c4:
18:4c:75:ca:d3:da:a5:04:81:2c:af:c2:6d:26:c8:
29:ea:c5:4e:74:58:4b:47:64:1f:96:48:8c:44:87:
63:f2:9e:f0:17:d0:c8:c1:85:a0:be:b3:4e:f2:fe:
55:2f:06:b7:f2:69:fa:9d:1a:ef:09:ea:a5:d9:52:
59:b0:0e:b1:0f:55:c8:95:6e:aa:d3:ba:24:f8:8f:
85:77:e0:5d:06:9f:f2:dd:3c:fb:12:79:8a:55:c3:
70:30:da:b6:f4:7a:0a:3e:52:63:b6:19:48:ab:57:
bf:c2:96:50:48:1f:b9:c3:2f:58:5f:53:01:03:b7:
bc:67:b3:2a:6a:e1:43:05:dd:33:61:91:80:1f:69:
9f:fc:e3:95:76:03:3e:c3:08:d8:5a:2d:a0:92:c8:
a0:89:3b:08:55:36:8f:83:cc:69:69:dd:37:cb:b8:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:41:C7:DF:7F:25:3F:F5:DE:4F:E5:B5:E9:99:68:3C:FA:19:89:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d5252638-980a-3822-84c8-9f64b45c72d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
64.124.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:5b:b0:99:c7:87:38:7c:3b:c0:20:31:1d:6f:91:1d:80:32:
5e:24:75:53:ba:7b:b4:31:c8:ae:ae:9b:97:90:26:7c:64:92:
84:ef:b5:96:11:46:89:6c:80:a8:39:ab:b7:f1:be:6a:5d:13:
4b:70:9a:b3:c9:06:85:00:e1:1f:78:1c:23:c4:ed:3e:a7:52:
a9:48:95:57:df:bf:12:27:f6:ac:c0:f4:a4:57:e5:13:df:8b:
b0:bf:c8:f6:00:f4:a8:70:42:45:ea:06:d4:99:6b:78:08:45:
2d:01:72:4a:09:04:d8:d0:1d:c9:4d:61:35:13:0d:2c:28:5a:
9a:dd:d5:b8:e5:02:1a:91:91:20:7c:de:94:c6:a6:20:0d:23:
9c:90:57:2c:e3:d5:f2:fd:12:1c:40:0c:cb:cb:dc:46:20:30:
f3:82:f4:35:2a:e3:1a:8b:08:a8:89:b9:ff:f5:08:13:04:a9:
40:47:9b:51:f1:1c:e8:61:11:8a:87:5b:f4:0f:3d:bd:f8:4c:
e0:ff:b0:10:e5:22:d9:58:c9:31:92:f0:1d:6c:8c:5b:f8:20:
3a:f1:10:2e:69:c1:bb:ef:91:3f:20:06:e4:fe:14:07:87:33:
c3:c1:eb:2d:93:ca:76:b7:71:e8:65:85:61:c0:c7:b9:2b:38:
f0:5d:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:46:49 2025 by rpki-client