Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/15f75e85-b2fd-3814-915a-0e36851d49a1.roa
File: 15f75e85-b2fd-3814-915a-0e36851d49a1.roa (raw, json)
Hash identifier: fJBnV2MOCI0Sw5l1xH87zkNavLiAVz1cQx6JX6j6V8A=
Subject key identifier: 78:86:B9:A5:B0:5D:7C:A0:6A:1B:88:70:08:0D:15:92:57:E9:41:FF
Certificate issuer: /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial: 010D0C9F43285849088166E00AFAF3E92AA3AB20
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/15f75e85-b2fd-3814-915a-0e36851d49a1.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 399812
IP address blocks: 64.29.136.0/24 maxlen: 24
2607:f3a0:a008::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:66:e0:0a:fa:f3:e9:2a:a3:ab:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=30d5867a-8624-43b6-9d64-055e78e4c524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8c:b1:4f:42:d9:2a:d6:50:5a:a4:7c:07:77:
fd:01:ee:7e:fc:8b:67:43:6d:bc:26:1b:75:1c:ea:
03:97:0d:72:a7:3d:c6:07:9c:02:21:bd:bc:05:f3:
01:60:20:f2:a2:d8:1c:7a:89:84:da:72:8d:a0:c2:
8f:a3:c6:a8:28:cd:66:e2:5a:20:85:f4:9e:bc:87:
17:16:df:2a:35:27:13:ae:4d:82:de:d7:a9:ee:0c:
fb:56:c0:68:32:e7:bb:fa:c1:da:0b:0d:e0:b5:2d:
5f:f6:fa:ec:e8:20:ab:22:dd:1a:47:11:b1:2a:36:
a8:4d:3f:d2:0d:72:99:7c:e1:0a:97:ca:3a:44:cf:
17:69:95:3b:b3:31:d5:fb:e2:71:80:88:d7:1a:92:
44:f7:48:52:2c:e7:35:55:40:60:0b:0b:14:e8:03:
55:e3:0f:ed:0d:22:f2:a9:a8:06:5d:ee:43:f9:66:
54:7d:44:d8:56:24:5d:56:47:89:4b:5c:cd:ff:f0:
be:1f:26:1b:63:ba:e4:68:24:02:35:5f:6f:5b:34:
5b:2f:fa:a0:ba:a1:45:23:ee:d9:f6:08:2e:ad:44:
a7:77:b4:c8:37:2d:b5:59:03:17:f7:4e:a7:3e:14:
8d:09:ab:bc:5a:c0:93:c0:9b:b6:96:a4:30:1a:7c:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:B9:A5:B0:5D:7C:A0:6A:1B:88:70:08:0D:15:92:57:E9:41:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/15f75e85-b2fd-3814-915a-0e36851d49a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
X509v3 Authority Key Identifier:
keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.136.0/24
IPv6:
2607:f3a0:a008::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:e3:ec:99:c3:29:95:c9:9d:57:b6:e8:a5:a6:bf:3a:07:36:
01:44:83:2e:78:c1:fe:66:26:e3:96:fe:97:fb:fe:85:8d:23:
84:4d:f8:fa:ec:12:7f:24:78:b4:e0:b7:5f:84:9d:30:86:e7:
0f:1f:67:02:38:91:be:b9:71:ea:03:48:6e:e9:4b:85:52:e5:
67:99:1e:e1:11:7a:98:a0:64:ce:46:cf:ee:33:a7:22:34:68:
80:6a:17:24:2c:67:f0:5a:25:77:3c:bd:e7:6d:42:58:63:55:
cc:fa:d3:18:4e:5a:73:0f:2c:39:68:e8:57:e5:32:0d:e5:cf:
b5:0f:9f:c7:d2:05:4d:f8:e1:bf:ba:e4:8f:b2:7b:13:2a:61:
f4:83:b3:5a:7a:ca:de:a9:33:2a:d7:2b:f7:eb:e8:b9:8b:8b:
a9:e7:a4:a8:55:bb:a1:84:c3:89:4c:84:6b:a0:35:08:2d:65:
32:47:dc:35:4e:24:6b:9b:5d:33:b6:98:ba:28:10:1e:10:4c:
d2:17:43:10:c3:40:9e:0d:0b:c9:23:11:97:ea:d4:23:9f:1a:
c8:44:89:db:28:8d:d9:0a:be:8b:c3:c7:95:72:a7:f7:bb:6b:
6b:ed:fd:d0:e0:12:5a:b4:ca:8e:e0:0d:53:89:02:b9:25:d6:
fc:89:01:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:41:19 2025 by rpki-client