Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa
File: 894b6866-3a19-3c26-9b99-d25c3c417e70.roa (raw, json)
Hash identifier: Ht9QlagUclF0qx6AfMyY/IRZp6tN2RSeYRCMYsK/FLU=
Subject key identifier: D1:81:72:3F:B7:A2:98:F7:CA:58:84:19:AC:7D:DB:A6:D2:02:9D:9D
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F43285849446947E4929AC9D620F47B50
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 4922
IP address blocks: 24.149.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:47:e4:92:9a:c9:d6:20:f4:7b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=65c5c471-7850-4a0d-aa52-2670ee7d8b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:08:b0:77:23:2b:18:65:c7:d9:71:d4:2e:
30:d8:3c:21:9e:54:b1:14:e9:48:fa:a4:d0:27:73:
7c:b3:f9:ec:58:85:ac:9b:3e:05:74:5d:40:ca:ca:
ad:58:a9:4e:16:2a:5d:2f:db:d5:38:8f:b4:96:2e:
53:4a:6a:ec:c7:34:78:76:6e:a4:60:f2:9c:b3:34:
f5:84:e6:5b:b2:02:e8:cb:b2:d4:4b:f4:db:32:50:
d3:24:72:bf:df:b1:f2:38:b7:9d:96:89:2f:79:a4:
1a:ae:95:e5:55:11:e2:03:56:4f:fd:21:ce:92:27:
95:0d:fd:79:ac:0f:aa:b6:ef:c7:9f:64:e7:23:7f:
bb:8f:b8:6a:e5:57:4a:8c:03:c2:94:8f:8a:00:f7:
9d:24:ef:f9:48:21:d9:e2:3d:7d:64:82:8f:69:84:
f4:d7:dd:4f:0d:05:80:1f:b0:7e:f9:59:b4:9b:24:
f2:21:c8:68:aa:d2:d4:75:2d:1d:0b:22:af:be:51:
ae:93:ad:86:29:86:97:e2:99:ef:6f:22:8d:41:82:
7d:47:d9:44:31:92:d9:e5:e3:f4:65:af:2c:1c:f6:
bd:69:2d:c8:bb:60:c4:a9:36:4e:67:47:3e:89:b7:
95:b3:7c:80:ef:b5:d3:ad:93:89:bb:ab:77:7e:80:
4d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:81:72:3F:B7:A2:98:F7:CA:58:84:19:AC:7D:DB:A6:D2:02:9D:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/894b6866-3a19-3c26-9b99-d25c3c417e70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
24.149.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:84:48:ce:27:87:94:0b:1c:14:07:cd:f9:76:9e:23:57:4b:
f7:16:30:e5:15:f4:34:35:d4:e1:92:36:4d:68:49:95:4f:50:
14:f1:db:69:d7:01:49:e3:24:1d:1f:cd:08:43:bf:a6:26:4e:
7c:bb:83:5e:74:79:e8:3c:3d:94:62:6f:f4:96:f3:ce:78:9c:
70:3a:c7:ba:9b:a0:a9:cc:38:5a:49:74:8b:b7:5d:26:78:10:
c5:1b:4e:3b:10:89:5b:17:46:30:4a:e0:9e:79:ae:17:71:cb:
ff:62:a2:f0:0b:88:09:1e:22:17:12:99:fb:b0:e1:08:6d:5e:
1d:b9:c0:9f:52:f4:cb:f5:61:ca:a2:79:a6:6d:9d:b0:f1:49:
46:83:3d:cc:ad:85:32:75:3f:1b:ff:51:97:d0:4b:46:c5:40:
a8:32:99:04:ab:7c:e6:2e:f2:84:e8:56:68:fd:22:29:9b:de:
db:72:04:6f:5d:75:ab:52:4b:62:99:78:ae:c7:15:a1:63:ce:
f1:51:25:2f:b2:fd:f1:a1:1a:72:1c:09:cd:cd:97:0a:fe:a4:
8f:79:7f:ac:7e:54:74:7e:aa:9d:10:3b:92:4b:88:35:12:da:
b5:74:c6:55:ed:e3:9a:31:df:c3:97:01:44:1b:48:ea:49:aa:
00:9f:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:15:46 2025 by rpki-client