Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa
File: d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa (raw, json)
Hash identifier: 3SFiaV0BMa94FkEx05yeg0I/f+GBYjs1aqfsLNVNv08=
Subject key identifier: 07:28:7B:EE:94:08:94:26:78:27:AF:8F:EF:EA:FE:15:02:4F:D3:1A
Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Certificate serial: 010D0C9F432858494FFF0B09AA3AF0E718B26C80
Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa
Signing time: Wed 26 Mar 2025 04:36:34 +0000
ROA not before: Wed 26 Mar 2025 04:36:34 +0000
ROA not after: Tue 24 Jun 2025 04:36:34 +0000
asID: 14090
IP address blocks: 64.21.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:ff:0b:09:aa:3a:f0:e7:18:b2:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Validity
Not Before: Mar 26 04:36:34 2025 GMT
Not After : Jun 24 04:36:34 2025 GMT
Subject: CN=32e7ae65-c2d8-4dc8-a935-0a59e7f9c574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:f3:cc:36:ce:33:e5:47:19:ea:ab:8f:3f:
41:ea:7e:29:ae:d6:27:57:ca:c0:c5:29:ab:35:4c:
30:77:23:13:42:2b:c0:46:3f:e5:ec:3f:ce:34:90:
3f:38:d9:ba:07:9e:77:6e:1d:9a:2e:f8:d2:19:62:
99:d6:e2:f8:22:33:0c:d7:d8:cd:36:d1:59:50:0c:
55:b3:e7:53:71:16:f8:0e:d3:fa:01:e6:82:d9:77:
28:0c:c5:b7:d8:9e:e8:32:f4:91:df:4e:82:44:ef:
f9:1b:e5:27:92:a8:29:3a:f1:ed:77:a0:7d:96:4b:
eb:47:26:b6:03:b3:fa:1b:09:de:84:78:22:09:62:
48:8d:11:ce:ed:45:1f:bc:e4:3e:be:97:33:2f:13:
cb:6b:b7:71:05:14:96:cb:94:8c:fa:08:4f:e3:73:
27:1e:6f:b8:90:69:1e:18:72:74:9b:2d:18:e1:8f:
35:27:ed:3e:db:09:31:62:35:36:e4:05:61:43:46:
2f:bb:52:f9:01:e2:27:48:78:81:e6:60:a3:d3:ba:
d9:a2:77:8b:2b:6b:c6:1b:9a:69:6b:01:78:c6:20:
24:15:b4:42:bb:54:90:27:a6:5c:27:5e:e1:1f:30:
fa:1b:0d:0a:06:4a:42:cc:0c:7f:7f:8e:1d:67:33:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:28:7B:EE:94:08:94:26:78:27:AF:8F:EF:EA:FE:15:02:4F:D3:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl
X509v3 Authority Key Identifier:
keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
sbgp-ipAddrBlock: critical
IPv4:
64.21.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:f3:09:64:5e:c0:50:5c:40:d3:5f:c0:7e:ad:10:c9:51:0a:
9b:ca:e0:4e:b4:98:80:de:47:9e:93:73:dc:11:76:7d:9b:18:
ce:15:11:64:2a:c9:bc:96:a8:b0:19:8e:e8:1a:dc:58:52:c0:
64:e1:50:98:16:b6:83:99:38:cb:36:94:86:f4:1d:17:03:d6:
c2:dd:39:63:4e:f8:d4:c3:b5:bf:d5:17:a2:a4:d4:7a:87:98:
0f:28:b9:62:c7:19:56:0c:95:79:2e:16:66:65:35:da:4e:e3:
c0:22:0b:76:f2:82:f1:53:21:9b:d4:3d:ac:3a:db:86:52:b2:
1d:1f:dc:9a:4e:6b:2b:c8:e1:1c:34:0f:cc:c6:7d:47:7b:4e:
64:02:88:d5:27:6f:ba:c2:d1:dc:25:2a:0e:12:0b:38:8f:a2:
76:d4:21:c7:ee:a8:14:4e:63:2a:16:a8:c9:13:fb:c2:39:59:
6a:68:7a:26:9a:d7:cd:b3:4f:f4:be:99:33:77:7c:b2:5c:7f:
68:a7:fe:ab:61:6b:16:3b:bd:fe:10:40:50:c0:f8:73:dc:0c:
90:af:0a:74:60:7a:21:28:c0:b4:c3:eb:7b:8d:57:03:e2:b0:
76:dd:bf:e8:1e:12:8d:dc:ef:2c:a4:6e:e1:d3:8f:89:c9:70:
b3:fc:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:41 2025 by rpki-client