Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0721195f-b137-3110-8f36-18e8f861fc0b.roa
File: 0721195f-b137-3110-8f36-18e8f861fc0b.roa (raw, json)
Hash identifier: 32ZmfaHCCyN7GVV5ijoKiVZfNdQC7qt/V+q9SJjzaSY=
Subject key identifier: B7:AB:CF:55:64:13:D3:D4:08:6E:A5:6B:C0:E2:B6:EC:84:98:3A:E2
Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial: 010D0C9F43285848F22C618633DD12428D977380
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0721195f-b137-3110-8f36-18e8f861fc0b.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 7029
IP address blocks: 64.86.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:61:86:33:dd:12:42:8d:97:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=c5ddec56-bb47-4678-a573-2d47802af67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:21:79:fe:a4:cc:c2:83:dc:76:54:52:61:
fc:5c:57:ee:7f:c9:2f:ed:ff:1e:92:7e:65:ac:c2:
88:47:6e:92:b1:af:c5:8a:56:8f:f0:8c:e0:0f:49:
8e:c6:f7:62:ed:52:0a:5e:31:41:ae:03:72:f0:a3:
67:59:ab:fc:f5:c6:c9:32:59:d7:08:33:f8:d4:5c:
af:39:00:88:1a:56:4f:0c:68:a1:10:7d:22:df:0c:
06:5c:69:a3:91:e5:c2:8e:dd:dc:82:dc:f8:9d:2b:
62:3d:9b:9b:f5:62:d0:d0:7e:4f:d1:7d:2a:cd:d4:
13:72:f6:c6:40:f9:e3:ca:6a:55:62:a7:ff:e7:1c:
bc:7a:ff:93:78:58:9b:65:19:ed:80:31:ce:28:90:
41:a6:d1:61:76:9e:49:53:ab:8a:56:36:b9:90:7a:
2a:cb:dd:23:50:c3:84:e9:d0:1f:f7:e9:bb:24:1d:
20:68:c4:68:13:80:f2:35:70:e2:d1:17:a4:41:5a:
f6:48:9f:5d:65:b2:94:b4:99:62:92:46:65:3d:60:
96:49:83:ed:8e:15:46:8c:33:df:9f:31:9c:a0:5c:
98:b1:89:69:0a:05:15:7c:db:8e:44:e2:b3:ba:49:
5e:70:e7:c5:df:ff:87:29:56:47:6a:a0:fe:0b:f7:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AB:CF:55:64:13:D3:D4:08:6E:A5:6B:C0:E2:B6:EC:84:98:3A:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0721195f-b137-3110-8f36-18e8f861fc0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
X509v3 Authority Key Identifier:
keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
sbgp-ipAddrBlock: critical
IPv4:
64.86.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:7d:ec:bf:ce:fe:8c:fe:0a:b6:74:a9:c5:79:77:c6:e2:e7:
c9:2b:1f:5a:c4:f9:67:ca:69:1e:2e:29:ac:07:ec:cc:d0:d6:
3d:21:14:77:da:a1:58:9c:51:70:dc:3d:1a:fc:9b:b9:bf:f1:
64:25:69:bb:b3:aa:ef:ab:31:17:f7:d7:e5:39:a3:88:16:47:
c9:b8:77:37:2d:0d:c4:5c:d0:84:35:7f:4b:fd:10:bb:09:7f:
d0:8b:8b:a9:14:60:5d:c3:31:40:a5:75:1a:14:2e:81:b4:a1:
c5:ea:a2:c4:fe:1c:f5:e7:0f:dc:d2:ee:84:12:e5:0e:5c:d0:
b2:61:65:a5:54:3b:be:03:b7:fb:ca:81:c7:9f:dc:21:5d:c9:
f1:0a:b4:32:f5:e0:39:d5:13:40:cb:65:c1:6c:73:f4:6c:4b:
2e:4d:fc:e3:fb:cb:9d:52:08:ea:40:d1:77:0f:4d:77:79:ae:
8d:dc:27:a7:80:3e:f1:9f:1e:c0:33:1b:57:e2:18:d8:56:9c:
be:99:ed:33:54:9b:2b:cc:ad:75:40:87:d1:22:6c:a0:28:ed:
1c:a0:dd:1d:42:50:1c:7b:50:49:41:ac:9c:40:f6:52:62:45:
52:1d:04:1b:4b:30:b0:1e:43:4f:51:23:5c:b7:14:c9:23:a7:
14:0d:0b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:34:56 2025 by rpki-client