Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/73f5f923-a145-3582-a788-fe56fb4baa8c.roa
File: 73f5f923-a145-3582-a788-fe56fb4baa8c.roa (raw, json)
Hash identifier: bD0Cd+souZjbx8KU1owXzK/N3B2Eu+Y7Wx1hYDWHXhU=
Subject key identifier: A5:AE:E8:27:62:5A:AC:EE:62:7B:FB:36:FC:04:E8:E7:F5:E8:9C:F1
Certificate issuer: /CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
Certificate serial: 010D0C9F43285848C150D3501800C2B784770800
Authority key identifier: BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/73f5f923-a145-3582-a788-fe56fb4baa8c.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 3580
IP address blocks: 63.133.224.0/20 maxlen: 32
69.172.128.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d3:50:18:00:c2:b7:84:77:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=848bf051-78ce-48a3-be34-1de0c221eed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:2e:dc:a7:73:a7:90:25:56:4d:be:17:f2:
8d:b6:b2:86:c8:a6:8d:46:dd:f9:35:dc:ca:a2:d7:
b8:40:9e:f3:9d:27:8a:f8:1d:71:98:d0:97:33:b4:
c9:32:ff:e9:07:99:ae:01:f3:0d:12:e3:f2:76:95:
51:bd:cf:d7:47:65:ed:9c:8f:e3:0b:37:66:c6:c5:
02:b9:02:2c:fd:cc:04:a5:27:d4:99:a6:5d:8e:92:
c8:c0:81:b4:db:77:66:30:37:cd:43:eb:ad:0d:ba:
50:da:67:06:2a:ee:ba:60:7a:a2:cc:b1:fb:81:be:
7c:a9:62:38:a2:1f:8b:9a:ec:87:86:39:83:e8:6a:
e4:f2:81:61:99:73:26:57:cc:72:52:c3:89:d5:ae:
8c:f6:e7:56:03:53:92:ff:f7:f4:51:48:a0:5a:17:
aa:e0:28:d3:e7:70:23:11:8b:27:47:02:a2:ec:13:
56:28:05:eb:3a:15:7a:c6:cd:38:55:35:e5:13:91:
63:98:54:63:0f:b0:b2:dc:41:40:1d:25:e2:4e:5f:
5f:69:31:7d:a8:8c:cf:77:c1:f4:0a:f7:7b:40:57:
69:e5:f2:c7:6a:65:99:8d:db:93:31:ee:ef:4d:a7:
06:4d:35:24:a6:11:61:f4:e1:f2:30:b5:a0:7c:64:
6c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:E8:27:62:5A:AC:EE:62:7B:FB:36:FC:04:E8:E7:F5:E8:9C:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/73f5f923-a145-3582-a788-fe56fb4baa8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl
X509v3 Authority Key Identifier:
keyid:BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
sbgp-ipAddrBlock: critical
IPv4:
63.133.224.0/20
69.172.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:2e:33:bf:45:ae:b1:ec:21:9f:2d:a6:5e:37:12:6f:11:12:
2d:80:52:86:f5:a7:e3:87:22:59:da:01:ca:b5:e6:84:7f:e1:
b7:98:cf:f2:a0:09:65:a7:3a:5d:18:75:bf:d3:c6:6d:ca:ef:
24:c4:d9:44:ec:71:a8:9e:c8:c4:de:db:e1:78:8f:74:02:c4:
01:f0:61:b7:19:5e:b5:7d:b8:e4:1c:b7:9c:be:f8:1f:3c:2f:
ac:a0:6e:de:c5:de:2b:1f:3c:0e:77:be:a1:01:88:3b:50:2d:
a8:9f:b3:72:4d:31:a7:66:8c:cd:69:fb:6b:11:09:79:6a:7e:
ed:be:d5:bc:bf:31:1b:67:10:f3:91:de:45:10:f8:67:51:36:
d3:77:3b:f0:8c:43:2d:bb:fb:95:3a:83:b6:3a:b4:c4:3a:1a:
7f:d2:83:81:11:b0:61:08:cf:ef:8d:fe:e6:c8:2b:6d:a6:2e:
ac:04:56:8e:9d:c6:6f:31:dd:26:00:fb:ca:bb:1a:f5:ba:5d:
8a:8d:e7:12:36:4c:ec:8d:42:ef:f1:00:75:f0:24:b9:b4:b8:
56:63:ed:4a:ed:eb:cb:94:8a:3f:69:24:2b:22:79:ad:b5:d6:
e0:da:89:38:8f:65:05:71:86:d9:2c:0f:14:5b:4e:c3:e6:38:
f1:44:96:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:50:18 2025 by rpki-client