Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa
File: 1529c059-7633-3836-940a-f5b311f13fd2.roa (raw, json)
Hash identifier: c8DaFH2vxklehL7pUMASfkM3zeMeE/U5o+JXJqwzMgw=
Subject key identifier: 0B:64:8A:32:26:38:FB:9F:13:B0:BD:FF:38:08:AB:2D:DE:60:03:BE
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F4328584949FE9133408737026D42E7C0
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 393885
IP address blocks: 64.71.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:91:33:40:87:37:02:6d:42:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=1a72daf4-06c0-43b2-a44b-ab52fa23ee06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:ef:c7:6e:b4:28:f0:05:fe:38:13:6b:bb:
b0:35:88:0c:04:08:62:87:fb:67:b0:9c:c1:57:69:
79:d5:8d:91:3a:fd:7e:06:10:9a:c7:bb:e8:81:82:
d9:31:6c:ce:01:8a:b3:08:13:10:10:35:c4:e7:69:
e4:e6:21:0b:7e:c4:7d:a8:04:cf:46:21:17:da:2e:
3d:76:32:5e:6e:23:6f:18:81:eb:77:35:2d:f6:29:
27:41:2f:d9:fa:7e:d0:8d:80:cb:17:ca:be:df:77:
1f:dd:ee:6b:80:42:61:ae:2c:b1:ed:6f:9e:04:77:
21:c6:b8:7f:f6:b7:21:fa:60:bb:89:46:76:b5:67:
1b:a8:35:4a:cf:1d:67:6d:fc:75:01:a1:4f:5f:27:
1f:6d:40:56:38:6f:33:c3:4c:41:23:54:05:cb:d1:
a9:26:6c:c5:1c:f7:bc:b2:87:6d:2e:73:d8:f1:97:
9b:85:81:bb:2f:83:eb:57:74:78:d8:bc:74:d9:8b:
34:39:b6:18:c0:5b:d4:db:13:2f:64:fe:7f:3b:b2:
1f:5b:13:19:92:ca:df:c0:b2:3b:d6:3a:55:6c:d8:
63:f1:c9:d7:18:ac:d3:04:15:46:b3:72:42:49:80:
79:d4:6f:19:73:ba:30:96:c1:7a:80:8b:f0:3c:69:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:64:8A:32:26:38:FB:9F:13:B0:BD:FF:38:08:AB:2D:DE:60:03:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:c5:ba:98:c5:0d:c6:e4:93:df:d3:3b:1b:ba:9c:c3:32:65:
34:88:28:51:c5:a2:43:65:05:ba:8b:2f:c4:8b:b2:1b:58:84:
2d:95:26:63:78:fd:ac:ee:83:bf:de:ea:f9:bd:6f:5b:0d:85:
fa:fb:b3:ef:ab:51:f1:67:e8:7c:77:fe:3f:a6:b0:db:66:a2:
d9:5a:03:0b:d6:b8:a6:87:dc:32:0f:f5:85:74:6d:a6:93:47:
9a:b7:4e:10:3e:5c:14:94:89:64:7d:d4:2c:f1:fd:82:ef:c9:
4d:44:c7:ac:32:f5:4c:a6:10:0c:e9:45:f8:e9:a9:c3:9b:57:
14:23:9a:31:89:80:19:4e:2e:a7:6d:f0:17:c8:88:64:35:ab:
e0:12:63:80:cb:48:d9:3b:a4:62:21:49:0d:5c:30:d4:35:17:
d7:8b:6d:26:a9:48:04:de:a3:5a:dc:2d:18:fb:e9:b2:d0:5a:
e5:f3:eb:b4:8f:b4:d3:48:d9:b1:a8:9d:21:ba:c7:54:2f:84:
c4:d9:2d:73:80:63:88:aa:71:9b:30:aa:f9:46:a7:88:12:60:
b7:0e:34:8d:a7:3d:c5:26:d4:a6:8b:e5:ad:1e:41:76:7d:9d:
41:af:a6:48:0a:55:b7:ee:db:c3:a2:ac:1e:0e:11:ff:4c:b3:
be:1a:54:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:19:05 2025 by rpki-client