Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/0ec3c190-7291-33e9-8f47-1a99ff2be2a5.roa
File: 0ec3c190-7291-33e9-8f47-1a99ff2be2a5.roa (raw, json)
Hash identifier: tTdGSmBvxXo3+wnL7VftMuvzT8y+n1UgZwvUgg+2NEs=
Subject key identifier: AF:E3:80:DB:95:A9:8C:34:AA:BF:5D:9E:36:C5:73:06:97:AD:13:19
Certificate issuer: /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial: 010D0C9F4328584908815E3B38345D4620586600
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/0ec3c190-7291-33e9-8f47-1a99ff2be2a5.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 399819
IP address blocks: 64.29.129.0/24 maxlen: 24
2607:f3a0:a001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:5e:3b:38:34:5d:46:20:58:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=0c7328ab-84f7-49d5-86bd-fd38b8ab49ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:0b:fd:28:64:b9:18:a7:6f:e3:6d:86:45:
db:ba:52:8d:3b:c0:44:d8:b0:96:b2:29:26:e1:cd:
bf:92:67:50:ed:b7:04:aa:74:ed:1b:05:bd:17:0b:
eb:e7:c2:d5:99:57:72:de:18:f6:5c:cc:96:14:07:
d2:14:41:f1:2a:c4:e4:31:89:cd:6a:d1:6b:e5:35:
24:4a:28:fe:16:c4:b1:c2:62:3a:1b:a8:38:33:c2:
8c:1e:ec:9e:84:22:b5:f6:f8:da:91:a0:26:d7:a6:
8c:f7:25:1d:af:ce:9d:6a:83:c3:2b:70:b1:8f:fc:
ad:df:15:e0:13:8c:f1:75:4a:b8:a2:c9:86:71:86:
b3:08:4c:f2:68:24:a8:93:b4:e4:7e:f1:a8:6b:9e:
85:dd:d2:b3:fa:c6:38:be:89:78:e6:56:e8:dd:2a:
f2:24:82:b5:ba:71:e6:35:76:09:8e:c4:59:05:54:
de:cb:9a:a6:6a:56:bd:5c:88:d5:b3:9a:8f:59:13:
f0:de:95:06:ce:f8:1c:87:39:0a:64:31:25:40:ba:
fd:77:f8:d5:3c:c6:31:eb:18:00:32:f3:bf:1c:1e:
ca:77:5e:61:7b:c1:c4:86:b4:a4:c8:ad:48:2b:b7:
97:d3:c7:a2:42:81:3d:13:14:01:aa:1f:2b:b0:58:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E3:80:DB:95:A9:8C:34:AA:BF:5D:9E:36:C5:73:06:97:AD:13:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/0ec3c190-7291-33e9-8f47-1a99ff2be2a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
X509v3 Authority Key Identifier:
keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.129.0/24
IPv6:
2607:f3a0:a001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:31:38:d7:ad:5c:5b:59:f9:5a:68:a3:a2:50:a4:77:09:a1:
51:f8:dc:51:4f:9d:74:59:69:a7:d3:d1:13:76:18:19:bc:8e:
31:1c:d7:42:31:f1:29:ad:c2:7e:cb:00:06:06:7c:e9:36:99:
a9:fe:e2:27:26:a5:26:ce:6c:02:93:05:6e:8d:90:ad:dd:0d:
0e:0b:aa:71:7e:9d:5b:bf:7a:13:ff:a6:16:d8:db:bc:ef:fc:
b4:67:18:e9:0f:62:14:44:90:f2:84:f3:f3:74:8d:74:b3:7e:
61:13:81:ea:b4:9a:fb:63:18:2c:0c:6a:bd:f4:66:11:61:d9:
ab:ae:2b:24:8e:28:a8:b3:80:19:e0:c6:b8:5e:00:d7:24:11:
57:53:b9:29:33:07:73:b2:06:e2:d8:6c:55:66:9e:a7:d8:22:
b4:14:a2:44:c0:f5:14:71:ce:d0:d5:f8:16:55:2c:40:50:d4:
e2:90:dc:aa:9d:38:22:07:2b:1d:e3:cb:2d:3f:d2:32:8f:d8:
1c:f3:93:1b:64:90:1b:ab:b5:56:fc:ac:53:a9:d5:04:18:6f:
c9:56:cf:c9:6a:7a:e9:fe:5e:ca:3b:b5:f7:ed:c5:b6:63:a8:
ac:02:d5:a8:b7:a7:40:12:b8:70:da:15:ea:64:2c:0f:13:90:
cf:d9:31:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:58:43 2025 by rpki-client