Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/21f20ac1-f455-3f3f-a97d-fea2e37f2866.roa
File: 21f20ac1-f455-3f3f-a97d-fea2e37f2866.roa (raw, json)
Hash identifier: Hdcxmtv88sHvNz4EpzAOz1cDFvuE27KXqT5KXnMKm2Y=
Subject key identifier: 85:E7:AF:AA:41:26:64:D2:B8:6C:1E:96:20:E2:47:7B:A7:B5:3F:73
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1578F6E4804B4798BBD90
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/21f20ac1-f455-3f3f-a97d-fea2e37f2866.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 65.34.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:57:8f:6e:48:04:b4:79:8b:bd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=11d62862-ba18-4b4a-ba73-dbed485c6842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:ae:84:58:20:01:a5:11:29:25:17:57:64:
fc:99:95:3a:78:e7:72:9e:66:f9:13:ad:df:7e:17:
1c:5b:6a:56:41:d3:2b:4c:f7:cc:89:90:e6:fd:fe:
98:5d:bd:99:01:b8:9a:fa:31:c8:46:17:5a:42:da:
20:27:45:7f:48:fd:f3:f4:54:8f:b6:d9:6c:29:61:
23:01:da:99:3c:90:fd:87:ac:d9:c6:e1:0e:0d:71:
f4:f9:79:8e:e9:6a:80:58:9e:69:14:6a:9d:2e:12:
47:b8:e4:3e:d6:38:65:39:e9:59:f9:42:44:11:1c:
85:d9:89:6b:57:1d:aa:9c:4b:60:85:42:57:83:f7:
f6:69:07:6e:4a:13:bb:d1:86:80:62:4c:02:97:34:
c1:ac:17:14:da:ec:74:05:da:54:0a:21:7e:c4:a8:
25:9e:b5:b6:33:54:34:db:6d:b7:c5:d3:64:7e:64:
39:c8:d3:4a:26:e4:ed:cb:e1:2f:56:c4:e2:c0:85:
35:de:85:37:79:a5:26:fe:19:36:7c:e5:cf:bf:fa:
d4:86:ee:0a:68:f3:99:3a:54:f8:14:31:6e:c8:79:
d3:e6:72:52:a8:27:6c:e5:1d:ac:df:99:af:ff:6d:
98:21:13:7b:7a:2a:d8:8e:36:6c:30:f0:f5:15:8f:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E7:AF:AA:41:26:64:D2:B8:6C:1E:96:20:E2:47:7B:A7:B5:3F:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/21f20ac1-f455-3f3f-a97d-fea2e37f2866.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
65.34.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b6:04:62:8d:96:98:77:d9:fd:8f:26:68:eb:c8:fb:16:99:
a8:f5:9d:16:6f:1c:6e:75:de:1b:1d:09:1c:07:cc:aa:dd:71:
b2:68:7e:d1:0a:23:9e:e8:73:2d:b6:4e:be:79:fb:90:0c:2f:
ea:82:fa:03:75:fe:8e:f1:f3:f5:33:7f:c7:05:83:35:c9:57:
99:e5:30:5a:d8:ec:09:01:28:4f:e7:fb:ee:c0:c8:43:df:ba:
b9:c8:9d:a8:ca:5b:72:b2:b4:d5:77:89:8c:3c:48:f2:6e:69:
27:4d:c5:75:4e:66:0e:fd:c4:c9:77:24:5e:6e:87:ee:55:2f:
db:e1:3b:ff:f5:b3:25:8f:e6:38:9b:d7:d5:59:4e:2e:b8:d5:
1d:d4:66:1a:20:ad:7a:95:1e:a3:fd:36:6e:5b:09:a9:fd:46:
a3:ff:bc:b5:b2:ef:be:69:53:28:05:28:6c:f4:d2:09:56:30:
38:f6:cb:42:c4:80:fc:5a:34:b2:b8:33:eb:a4:b0:1e:46:7f:
cf:42:b5:0f:f2:1e:b7:f5:37:82:fa:7c:4b:77:2c:96:e8:47:
e2:46:7f:0f:ed:b8:3a:87:1d:e4:26:87:5a:69:91:b4:66:b6:
40:7f:c4:52:2d:f3:ff:6d:a6:7e:78:25:fd:67:7c:1d:60:db:
42:2e:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:53:36 2025 by rpki-client