Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/4ad53b99-cca9-368a-a43c-1dc21e63c2aa.roa
File: 4ad53b99-cca9-368a-a43c-1dc21e63c2aa.roa (raw, json)
Hash identifier: vBpknivgWpElGA0tCRsFHgL9vtRPXOZ0cpExKs8mJg0=
Subject key identifier: 40:BF:AD:85:1D:E8:A0:AC:61:65:69:A0:E0:5E:29:20:9C:66:52:7D
Certificate issuer: /CN=5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f
Certificate serial: 010D0C9F432858493BD9E868C3C7548DBEAB6D80
Authority key identifier: B9:85:D3:10:04:80:A9:C8:0C:89:53:A2:98:78:8F:C2:16:23:8B:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/4ad53b99-cca9-368a-a43c-1dc21e63c2aa.roa
Signing time: Tue 18 Mar 2025 23:25:34 +0000
ROA not before: Tue 18 Mar 2025 23:25:34 +0000
ROA not after: Mon 16 Jun 2025 23:25:34 +0000
asID: 55154
IP address blocks: 64.49.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3b:d9:e8:68:c3:c7:54:8d:be:ab:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f
Validity
Not Before: Mar 18 23:25:34 2025 GMT
Not After : Jun 16 23:25:34 2025 GMT
Subject: CN=62c4629f-d311-4e38-9647-918617601ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:01:89:f8:75:49:27:b5:b2:f3:ac:7e:3a:
59:c4:f1:21:76:e6:6f:15:60:3f:0c:e7:09:09:4d:
02:0a:a8:85:15:29:f3:aa:60:e9:ad:dd:46:39:9d:
0a:68:1f:f4:e2:b5:05:9e:bb:40:2a:ad:70:67:06:
b9:46:b4:98:24:24:0e:47:8a:3c:ab:9c:d5:49:c1:
8c:f1:2d:b8:89:55:6b:0f:62:d7:a2:6c:c8:73:db:
cc:7a:34:a6:63:4b:f7:ec:f4:5c:ff:c4:c3:b0:bc:
b8:dd:fd:e2:31:2b:a9:2a:04:ea:a4:5b:eb:b2:20:
c4:42:1a:8e:bd:a0:c1:2f:09:41:0a:42:16:e5:73:
a9:46:17:cc:cf:db:a9:90:bf:8d:bb:cb:77:da:2b:
be:de:a5:70:40:7c:5a:7d:9d:ef:ea:4d:65:84:60:
e5:4b:ec:1c:ef:c8:e3:a0:1a:d2:14:ee:bd:68:79:
da:13:ba:3c:4f:0a:c7:fe:95:c1:8c:8f:25:c2:ac:
71:dd:fd:f9:a3:0f:1b:06:1e:a6:69:4d:ca:0f:14:
20:b6:11:55:af:66:11:bc:29:76:9b:60:9c:04:0c:
ef:b3:11:fd:c9:ce:81:a7:d5:38:15:c3:fd:72:7a:
1b:91:d0:79:a6:a3:cd:a1:3c:a2:5e:cb:4a:e8:95:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:AD:85:1D:E8:A0:AC:61:65:69:A0:E0:5E:29:20:9C:66:52:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/4ad53b99-cca9-368a-a43c-1dc21e63c2aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.crl
X509v3 Authority Key Identifier:
keyid:B9:85:D3:10:04:80:A9:C8:0C:89:53:A2:98:78:8F:C2:16:23:8B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.49.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:4c:82:7b:b0:2e:9f:76:78:69:90:85:35:0e:ee:5e:11:fc:
8c:57:52:e0:75:4b:19:f4:fe:54:b4:64:86:89:d8:46:e1:47:
6b:3a:a2:f9:3b:cb:35:9a:4d:04:b2:6f:f0:89:f7:40:79:98:
ca:83:8e:fc:08:64:cd:ac:08:87:07:8e:bb:a9:dd:7d:de:97:
4b:6e:7d:68:5f:3d:71:19:70:bc:bd:60:f2:b5:bf:da:c5:5a:
77:57:c7:50:f6:c3:85:f5:2f:ce:92:63:cc:99:5a:c2:89:ad:
1d:ce:e3:2a:e8:46:2d:8e:49:6c:10:fb:b2:8f:e6:18:0f:e1:
26:8d:55:36:5e:9e:36:26:be:ce:75:c9:1d:ea:ff:02:ec:dd:
d3:9f:6d:82:02:a5:e9:17:c3:b7:6a:b5:bd:c7:c3:82:00:60:
f3:27:82:2a:1e:ef:d0:2a:05:c7:55:1b:80:b4:64:5e:84:46:
f0:49:65:12:7a:e8:b3:d2:7d:67:29:8c:5a:7a:cc:02:35:44:
78:0e:93:75:33:a9:2b:d3:df:a3:35:7a:01:d7:79:da:84:0d:
0d:50:f7:a5:76:31:0b:59:69:e5:db:c6:34:6c:86:e8:f3:ad:
23:bc:ea:c6:8d:43:40:11:3b:87:a5:ca:b9:ba:1a:88:76:e5:
09:bb:55:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:39:02 2025 by rpki-client