Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/3c0e2ac5-9045-3d8c-9ebc-4c1e6c2ea088.roa
File: 3c0e2ac5-9045-3d8c-9ebc-4c1e6c2ea088.roa (raw, json)
Hash identifier: AUyzV1qRgzS0RzHJaYQ78EE0KOySWiTLQ1c60wPeeDo=
Subject key identifier: 49:B9:C5:76:1C:3E:0E:6F:16:9D:AC:CA:A4:D0:D9:AF:69:05:B0:E4
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F6A03B2F96BB846371EA00
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/3c0e2ac5-9045-3d8c-9ebc-4c1e6c2ea088.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 8560
IP address blocks: 65.38.96.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a0:3b:2f:96:bb:84:63:71:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=ea1d1604-c763-4d64-acce-ef3f34988364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:32:ea:e9:01:f6:79:18:da:84:50:d5:bb:
93:12:f6:57:52:54:84:37:7c:b0:47:40:0c:fe:28:
b5:83:73:2a:5d:9c:0d:97:67:fe:bb:46:d3:a1:c1:
a1:27:e0:12:b0:b6:80:12:93:5b:bd:de:1a:63:d4:
a7:42:93:ab:03:6f:98:89:1f:a5:de:7c:6c:74:41:
0b:6c:0d:51:f7:21:84:b3:e6:f6:84:d8:8c:e5:71:
45:98:81:91:c4:e7:11:7c:c5:be:75:89:c5:87:bf:
ed:9f:0f:2c:37:27:fb:30:5f:a1:22:c8:93:9c:67:
ba:de:bd:38:f7:15:c3:b8:ad:83:b1:eb:d8:44:69:
aa:70:ce:93:c0:4c:a2:4e:f7:4a:cb:49:1e:73:18:
d0:49:7c:27:60:ab:b5:0c:98:f7:2d:32:ff:1a:ff:
39:df:02:46:cb:17:7a:bb:ed:98:98:82:ed:5f:34:
30:d1:3f:d1:a6:fc:2d:88:a6:33:b0:f4:90:83:ef:
73:74:0a:05:03:fa:44:91:63:e1:a1:47:e0:15:3b:
36:11:a1:21:18:02:ab:78:43:24:b4:25:cb:64:4d:
95:4c:fe:5c:cf:a8:ef:e5:3a:54:83:84:91:6a:a2:
bd:09:32:f5:df:0a:06:94:b8:db:e3:6d:07:67:82:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B9:C5:76:1C:3E:0E:6F:16:9D:AC:CA:A4:D0:D9:AF:69:05:B0:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/3c0e2ac5-9045-3d8c-9ebc-4c1e6c2ea088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
65.38.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:90:f4:55:bc:d8:5b:78:ce:37:66:08:04:72:8c:c0:c2:94:
33:55:92:c6:c5:b3:50:26:6d:ae:8b:54:06:c5:1f:38:1b:3a:
65:c8:e1:67:7f:42:3d:25:b0:19:62:3d:62:7d:37:fa:42:f9:
43:4e:2f:18:9e:d5:7a:a1:27:31:f3:19:cd:13:33:6e:0a:e9:
9a:22:ac:76:7e:92:d3:0f:a8:66:4d:8d:94:16:5f:a3:8d:e9:
14:7e:ad:29:03:f1:da:71:14:c6:ab:ba:2f:5a:16:01:59:a1:
92:8a:29:91:e7:b0:38:60:5c:22:00:d7:86:ae:4c:52:c1:90:
7b:fd:b2:50:ec:bc:6d:bd:38:9a:40:db:00:b0:dc:c9:ce:6e:
9d:c8:29:e4:29:7a:5d:25:7b:46:56:1d:b1:0c:ce:3c:f8:cf:
22:91:8c:b5:9d:c8:07:b8:45:d0:53:0e:d7:e2:c4:b9:e5:26:
fa:97:33:98:ee:58:ad:f5:e0:9a:54:6a:f5:e0:e8:fa:c9:08:
85:88:e5:58:37:12:c9:45:c9:d6:ec:92:35:66:8d:8f:8a:1e:
b6:7a:c5:0a:c2:c7:75:bb:08:e1:1d:eb:63:b1:96:77:25:2d:
f0:e5:05:7f:7c:ee:7f:be:34:bf:10:2a:20:74:c4:66:58:f1:
bc:62:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:32:13 2025 by rpki-client