Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa
File: 7942817f-a176-37e5-8911-6f29c62a1537.roa (raw, json)
Hash identifier: zR4b6lMis3azB1DyUTmlrDHJg43l8qWmMurdqmtdWJQ=
Subject key identifier: 71:3C:1C:C3:1E:9A:44:2C:CB:85:AF:58:81:77:39:75:E8:BC:31:8C
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F4328584949FE915FBA9F492F33DDA600
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 393885
IP address blocks: 64.71.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:91:5f:ba:9f:49:2f:33:dd:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=4f59a0ea-f2c2-4af7-b8f9-ed1948c51a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9c:39:ae:a4:42:3e:5f:3d:66:39:ee:95:58:
49:85:a7:60:8f:b8:ef:17:68:88:b9:68:77:e3:a5:
65:38:b1:08:e3:53:17:b0:83:78:4d:0f:97:05:52:
0c:61:95:70:c3:6f:8a:5e:74:f0:f6:aa:72:ec:c9:
65:a7:eb:cd:66:3c:be:a0:2e:55:53:96:6b:f5:2d:
7e:0c:d8:42:7b:eb:55:bd:16:03:54:d5:95:3b:8b:
16:03:65:c8:bb:1c:e4:1d:dd:7e:58:91:c9:1d:25:
79:e5:1a:24:94:9a:10:a0:cd:7f:29:a2:b3:62:a2:
6c:ac:35:fb:23:33:6a:a6:64:d5:ba:75:7c:69:5d:
17:16:89:52:d0:0d:3b:cc:a6:cc:3a:e6:c6:dc:96:
ac:24:0f:1e:04:8b:50:5a:ce:f8:7e:48:90:16:3e:
1d:d8:f5:2c:bb:a0:40:1c:62:a9:6f:58:8b:43:b2:
cd:96:5d:57:4d:a6:96:6d:bc:79:b7:15:ea:e6:37:
37:95:22:6d:36:8c:e5:87:3d:2a:e7:41:2c:82:a2:
89:cf:66:f9:23:b5:76:69:4e:85:72:77:37:54:43:
3c:0e:44:02:e6:d0:86:76:f3:e7:f6:b0:14:68:83:
b8:91:f3:27:ea:8b:b9:08:f2:3f:ef:30:44:99:77:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3C:1C:C3:1E:9A:44:2C:CB:85:AF:58:81:77:39:75:E8:BC:31:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:1f:ff:d5:82:0e:61:c1:8d:9f:7a:53:f8:eb:34:7a:c2:a9:
35:aa:5b:2c:63:c0:11:4f:28:ee:cd:b5:de:60:67:12:b3:4b:
14:e3:92:7d:ed:65:b4:cc:31:c1:12:ea:d4:62:2e:92:fa:ca:
d8:de:45:ed:c6:41:42:a1:9d:8d:fb:b6:92:3a:13:90:45:39:
5e:c1:ca:92:c9:06:d0:80:84:2e:69:1a:40:32:d5:45:2d:e3:
b7:58:f6:b2:51:de:01:ad:8b:2b:fe:a9:21:63:e4:ea:2b:c6:
96:a6:96:d6:f1:6a:a3:3b:23:87:fc:a2:c5:a0:48:31:d2:9f:
67:2c:4e:47:e7:06:67:72:37:72:5c:93:17:fb:c9:28:e9:71:
6e:03:a8:42:0b:d5:df:a6:31:28:0e:e3:13:09:2d:21:66:cb:
57:4d:05:88:51:ed:28:8e:0b:22:b2:f0:66:7e:5d:00:11:43:
c7:50:68:d0:82:98:35:40:26:f8:85:03:e1:83:c2:e5:dd:1b:
2c:52:30:d9:00:59:3d:a9:ab:36:10:5b:ce:25:b1:99:70:dd:
21:20:27:69:3b:f9:9b:02:02:f1:99:31:7a:09:fe:8c:dd:cb:
8a:dd:e3:12:2a:27:d2:43:a8:e4:54:71:b3:ab:df:8e:fb:fa:
c8:ca:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:10:40 2025 by rpki-client