Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/54d0d212-b71a-32a7-8baa-6b9126cf89c8.roa
File: 54d0d212-b71a-32a7-8baa-6b9126cf89c8.roa (raw, json)
Hash identifier: vWXmsC8VX7pthQNVAvkbolayg2iOrkvovO4vEe6Od1Y=
Subject key identifier: 4A:FC:C4:1F:BC:C6:20:95:ED:46:92:96:74:24:35:D4:56:C7:7B:33
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F432858494733FCC4F032D0F3189F8254
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/54d0d212-b71a-32a7-8baa-6b9126cf89c8.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 33208
IP address blocks: 64.18.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:fc:c4:f0:32:d0:f3:18:9f:82:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=e79b39ac-cc44-45ef-bbb9-a6615db90ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:2c:57:8d:fd:2b:23:8b:4e:c2:53:1c:04:
df:88:c2:b8:24:2b:2f:4e:71:0c:ed:42:ef:c8:8c:
21:0d:db:13:c9:3d:be:bc:32:5b:89:49:83:48:ea:
28:09:75:56:30:f4:48:85:d0:50:a2:42:7b:de:ed:
06:bc:1a:49:25:43:e4:e3:c8:71:4a:1b:90:85:26:
1e:85:36:0a:05:b6:58:f9:3a:ae:ed:b2:ad:93:76:
ca:44:2f:b2:d8:3e:9b:c5:38:51:f5:60:6b:5b:4b:
a0:e1:94:04:f1:8b:2d:8d:11:a1:5c:ef:fa:a6:4c:
ad:37:bf:5e:24:50:17:38:5b:50:d1:36:b9:dc:98:
4c:95:6b:f0:e9:a5:e8:f6:38:0b:f4:fd:bb:38:6b:
da:86:23:40:45:98:65:06:0c:69:50:09:d7:2f:8c:
cf:5f:88:a7:52:32:71:05:d6:e5:f3:86:dc:79:50:
be:d8:bc:0f:b0:e1:69:61:b6:0b:03:1c:a7:d2:bf:
f1:87:6e:00:ef:f8:2f:17:05:36:f7:83:79:bf:d4:
76:ab:f7:9d:46:66:82:7d:16:5e:43:38:6e:79:fc:
19:d1:c7:3e:22:24:43:35:ad:24:73:ea:88:af:9e:
01:c5:0c:11:5e:8f:bf:fc:83:3d:7e:0c:45:9d:b0:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FC:C4:1F:BC:C6:20:95:ED:46:92:96:74:24:35:D4:56:C7:7B:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/54d0d212-b71a-32a7-8baa-6b9126cf89c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.18.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:cd:9b:c7:ea:47:ea:30:46:4f:13:0e:c0:76:49:d7:af:df:
27:33:9f:43:68:48:32:3f:8e:0c:47:64:8e:16:a8:bc:a7:9e:
7e:97:68:09:a9:e5:e9:e5:25:ec:da:fa:8d:d5:8c:1c:10:93:
52:fd:e0:f3:10:15:bc:71:24:55:5d:53:7b:83:b5:7b:3d:b7:
cd:c1:cd:33:cf:d4:96:ae:6e:ac:ca:ab:42:44:05:96:ed:b1:
0a:57:86:55:1e:9e:68:0d:cc:35:4e:94:fa:9f:6f:fb:cc:8c:
4a:7b:e0:82:e8:d5:6b:63:7d:73:3f:eb:dd:c4:78:d9:d2:e8:
1b:17:00:4f:17:cd:ae:92:3e:50:05:5c:eb:dd:f3:cf:72:44:
b8:33:ca:32:96:90:52:a8:ac:8d:0e:50:99:b2:5d:b7:96:75:
ea:15:d3:0b:83:06:92:ac:af:e0:16:46:29:1a:fe:4c:94:bb:
4f:50:5e:f4:64:1d:e7:fc:7a:f2:1e:f8:69:6b:3b:a4:20:14:
77:47:5b:f8:47:77:ff:e0:ec:30:ee:58:ff:92:3a:74:cc:7f:
6d:df:66:73:c8:cf:99:ea:1d:88:b9:5f:32:09:50:35:46:38:
a0:23:a3:11:c0:f3:e8:c1:45:90:88:aa:c5:fe:15:6e:ab:a1:
0b:21:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:54 2025 by rpki-client