Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5a4220bb-f25e-36f0-9be5-d5fbfbfeb540.roa
File: 5a4220bb-f25e-36f0-9be5-d5fbfbfeb540.roa (raw, json)
Hash identifier: Zr2tYjhnSEAJwSBevuVRioKCvKBbzVSeLvrUCXExNi0=
Subject key identifier: D9:E6:B0:73:12:3F:4A:8A:F8:F5:3E:39:5A:43:97:9B:C9:FF:14:BC
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F43285848A1E383ADC7B7B250D32C9100
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5a4220bb-f25e-36f0-9be5-d5fbfbfeb540.roa
Signing time: Wed 22 Jan 2025 19:50:27 +0000
ROA not before: Wed 22 Jan 2025 19:50:27 +0000
ROA not after: Tue 22 Apr 2025 18:50:27 +0000
asID: 15164
IP address blocks: 64.251.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:e3:83:ad:c7:b7:b2:50:d3:2c:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Jan 22 19:50:27 2025 GMT
Not After : Apr 22 18:50:27 2025 GMT
Subject: CN=e41fa31b-127b-4292-a8d0-34859bed55b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3f:30:6a:25:f7:9d:c5:c9:9f:f0:04:19:ad:
7e:f6:87:b5:ab:0f:bc:db:68:c2:43:7d:e3:8a:2a:
ed:c3:28:33:5e:cf:af:03:c9:8b:cf:65:d3:99:e1:
2d:3f:8a:ea:ef:49:5b:94:fb:b5:f9:29:d3:ff:cc:
e3:36:84:1f:98:84:0b:41:f2:0a:7f:3b:d8:a5:7d:
1e:a7:e8:f0:18:21:97:eb:00:58:ed:85:78:f5:78:
a7:3f:8c:28:6f:11:8c:1f:c7:0e:da:3f:31:cb:ae:
1d:1e:3c:42:03:26:06:fc:2e:bd:7e:75:7d:1b:8c:
eb:e0:5e:6b:99:80:80:fe:27:0b:cf:61:93:05:cb:
fa:f9:26:f6:77:0c:bb:4a:67:d8:ab:b6:b0:ca:11:
6a:c8:80:ea:12:5d:b7:cf:cf:71:2c:14:da:b7:55:
e3:6e:a2:e5:19:3f:bf:1d:71:fe:22:f6:ef:89:d7:
57:4e:13:82:64:f8:cb:70:b1:54:b5:34:5a:7b:01:
d3:7d:e9:80:d1:72:17:cb:dc:d4:23:51:30:23:bf:
2d:db:6d:18:7b:a3:05:85:99:ff:07:c4:3e:b5:3e:
0f:84:de:93:ba:e6:6e:0e:bb:bf:d9:02:3d:c9:03:
01:be:00:5f:b4:e3:08:56:39:b9:55:7f:b5:10:67:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E6:B0:73:12:3F:4A:8A:F8:F5:3E:39:5A:43:97:9B:C9:FF:14:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5a4220bb-f25e-36f0-9be5-d5fbfbfeb540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
64.251.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:fa:fe:22:1e:79:4d:1e:30:2d:e4:9c:9f:36:f5:8e:37:bc:
db:f3:74:84:a4:1a:9c:ce:29:d0:a2:35:62:ce:5d:0c:30:a3:
8f:e2:c7:4f:ce:4c:d6:a3:ef:bf:61:1c:3a:53:b1:fb:ca:d5:
63:d2:84:7d:df:6c:b4:41:5d:c3:8d:ba:36:36:7a:a5:98:d0:
4f:08:db:61:17:90:6c:8c:f5:a7:bc:a5:23:50:d7:f3:ee:ca:
86:9b:f2:33:da:58:11:d2:65:57:1b:2d:f0:19:3e:85:c1:9e:
d8:a1:f2:19:6e:30:a0:90:27:ca:65:24:f3:b5:f4:f0:8d:9b:
aa:ec:3a:f4:0c:2a:a1:48:69:30:73:5e:e5:1f:7f:f0:35:45:
5c:c9:a6:ce:ed:36:72:08:a3:bf:e6:e0:a3:96:cc:4f:3a:52:
98:50:eb:b6:fa:fd:6f:61:e2:c1:f2:6b:8f:f4:71:81:5a:0c:
03:33:1d:08:09:5a:34:cc:ba:ed:66:90:80:86:94:49:7f:1a:
c3:36:c6:1b:c0:c1:21:b7:97:02:c5:35:86:47:7b:6c:c9:26:
b7:fc:b2:54:92:e6:20:40:ec:97:40:a3:66:84:e1:a6:2e:2c:
09:a9:99:ec:c1:a3:0c:3c:54:d9:d2:ca:2f:31:b3:2e:be:c0:
2c:ec:13:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:14 2025 by rpki-client