Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/72100194-b99c-3141-8253-08b1bd43b1ae.roa
File: 72100194-b99c-3141-8253-08b1bd43b1ae.roa (raw, json)
Hash identifier: tbIRT8GzmAI7fT3xowY+XaxMwCuLaX+Y+d8AAwV9wlc=
Subject key identifier: 21:2B:10:90:3E:23:81:5D:0E:F5:25:F6:DD:A4:7A:DA:E6:2F:4D:D3
Certificate issuer: /CN=5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f
Certificate serial: 010D0C9F4328584917DC322F1D3AE8BEBA55B1C0
Authority key identifier: B9:85:D3:10:04:80:A9:C8:0C:89:53:A2:98:78:8F:C2:16:23:8B:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/72100194-b99c-3141-8253-08b1bd43b1ae.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 2914
IP address blocks: 64.49.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:32:2f:1d:3a:e8:be:ba:55:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=606cc26c-6267-447f-90b7-d83cbaa045ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:65:d2:33:b7:e5:12:54:4d:30:50:c3:de:
5a:fd:d5:ee:c9:bb:98:08:01:fd:47:ca:40:3a:47:
fb:b6:ed:d2:83:90:78:7c:8a:05:6b:75:18:41:6c:
b2:53:62:72:38:81:f5:ea:89:43:92:ce:2c:c0:a9:
03:a1:c7:0e:38:c0:91:04:e8:ae:fa:44:ce:e2:4a:
7c:17:25:85:4a:be:ce:1f:8e:05:d1:05:0c:26:9c:
70:f6:e8:e6:99:66:14:ef:00:a3:f9:1b:1a:6a:ef:
8d:70:f0:6f:ca:99:62:51:46:10:46:ef:19:a2:3c:
9b:e1:87:3d:4f:67:98:42:c7:d9:0f:80:98:6a:91:
9a:3d:77:e8:f6:82:91:84:fc:a0:79:21:4d:22:30:
a9:84:f1:0b:55:95:cf:87:fa:59:e4:f1:b1:c5:84:
6b:78:f3:a3:c3:07:e2:da:24:1b:c7:5f:96:26:1b:
29:fe:c8:d4:7f:4c:4c:83:83:b9:f0:bd:ec:42:5f:
77:36:0f:c7:a6:68:ef:e5:fe:7c:61:cf:aa:cc:90:
74:87:5a:c5:81:e9:bb:40:a0:40:b3:d5:77:e3:ce:
54:2d:e0:4b:b0:26:02:65:54:5f:61:d7:6a:dc:7f:
73:54:ea:3f:6c:80:d8:4b:7a:e1:31:1f:d8:6d:c6:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2B:10:90:3E:23:81:5D:0E:F5:25:F6:DD:A4:7A:DA:E6:2F:4D:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/72100194-b99c-3141-8253-08b1bd43b1ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.crl
X509v3 Authority Key Identifier:
keyid:B9:85:D3:10:04:80:A9:C8:0C:89:53:A2:98:78:8F:C2:16:23:8B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.49.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:f8:9b:18:9f:1c:e5:c5:81:75:eb:34:7e:09:fe:d4:5a:be:
27:29:e7:fc:9e:46:c7:30:59:9e:38:6f:ac:6c:2a:b3:ec:1b:
08:79:be:2b:e4:72:f1:7b:1b:d5:69:a2:65:6f:22:5f:13:47:
4e:55:05:8e:87:c9:81:64:1c:b3:df:49:8e:c7:2a:46:92:a4:
7b:87:17:d7:b7:9e:5c:b0:cf:1f:ea:d3:66:96:ac:a3:ac:e9:
40:79:9f:8d:00:9b:86:3f:37:e5:14:3f:bb:82:cf:e8:6f:03:
0d:5f:cd:aa:b6:a0:c4:78:40:fa:2d:44:19:7d:b5:f0:7d:f6:
93:44:4c:e4:58:8d:5f:fc:1c:ff:e5:15:a0:ea:f8:34:f4:f3:
ef:1a:83:e7:22:0a:e3:96:fa:8a:9f:98:f2:53:f1:26:96:b4:
bd:fa:4c:ec:d7:3e:14:78:4a:00:55:45:cd:1a:d0:d3:e3:49:
c3:98:4d:2e:c4:52:97:af:c9:64:77:97:38:c0:f5:35:f9:e0:
3e:8f:0f:68:75:5b:02:f9:7a:54:de:4c:05:eb:b1:14:90:96:
c6:30:87:98:d9:2e:5a:fc:48:80:b5:0a:58:77:f8:34:0b:33:
53:d6:a5:bf:52:3a:05:fb:78:58:0f:6d:d6:39:85:d2:50:4c:
bb:ad:e4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:28 2025 by rpki-client