Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/7bac194a-18e0-36b4-83d1-6245c751326f.roa
File: 7bac194a-18e0-36b4-83d1-6245c751326f.roa (raw, json)
Hash identifier: j439qV+fqKgxzQldzVhhZEgMsZ3PbhKYCyI8+8gxKeE=
Subject key identifier: A8:02:52:0E:3D:1A:EA:24:B6:92:EA:62:52:CE:2D:F2:05:65:E0:59
Certificate issuer: /CN=b915136a-e2d3-4f27-83f6-3ee5af191f60
Certificate serial: 010D0C9F432858489BA0B226AC1652AF9505B8C0
Authority key identifier: B9:E0:D4:6D:67:07:08:51:50:97:DC:D8:91:70:DF:D0:46:7B:64:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/7bac194a-18e0-36b4-83d1-6245c751326f.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 400470
IP address blocks: 64.90.214.0/24 maxlen: 24
216.25.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b2:26:ac:16:52:af:95:05:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b915136a-e2d3-4f27-83f6-3ee5af191f60
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=c0572a61-09ba-4cf4-88c6-0a967da4fb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:4c:8a:b0:27:41:f0:d1:9b:9a:9f:db:7c:
79:02:75:60:d9:0f:f1:4d:36:d2:bf:7b:13:62:6c:
02:c7:42:fb:9a:3d:24:ee:c9:f2:f4:07:4f:c8:62:
77:cc:49:fa:10:9a:70:85:76:ae:f5:1a:a7:57:70:
81:0d:9d:74:6d:2a:f7:1c:e0:02:af:46:4e:33:15:
26:a1:6f:c9:4e:5b:7d:28:ab:8b:a3:c9:ce:12:e5:
ec:7f:49:07:81:34:e7:03:83:93:95:cb:f6:ff:f5:
f4:3d:20:1a:d4:ee:69:96:7e:13:d2:2d:5c:6f:79:
a6:39:43:f7:d3:83:3a:db:4d:30:7d:bb:da:d5:c5:
6e:1d:8e:fe:68:8a:f2:e4:ab:72:4d:6d:06:9f:a1:
0f:ef:06:45:21:4a:7a:96:66:0d:63:91:6d:24:5b:
e2:05:75:e2:22:ff:d0:95:64:73:39:a6:4e:e2:17:
7a:47:42:19:dc:60:fb:c0:04:79:59:6f:df:b1:c5:
42:f2:80:95:6e:7b:72:f1:ca:d9:6a:48:20:1a:db:
02:10:90:9a:71:b0:07:93:c0:c4:56:59:a8:f4:77:
cf:4d:42:dd:11:67:4b:84:bb:c0:4c:e0:bb:0c:8d:
b5:79:a7:17:75:81:2b:d2:1b:83:f3:8f:80:dc:27:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:02:52:0E:3D:1A:EA:24:B6:92:EA:62:52:CE:2D:F2:05:65:E0:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/7bac194a-18e0-36b4-83d1-6245c751326f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60/b915136a-e2d3-4f27-83f6-3ee5af191f60.crl
X509v3 Authority Key Identifier:
keyid:B9:E0:D4:6D:67:07:08:51:50:97:DC:D8:91:70:DF:D0:46:7B:64:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b915136a-e2d3-4f27-83f6-3ee5af191f60.cer
sbgp-ipAddrBlock: critical
IPv4:
64.90.214.0/24
216.25.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:71:2b:58:a6:d7:83:3e:43:1d:c6:03:0c:9b:b9:d4:f2:3b:
58:36:21:87:99:d3:75:e9:c9:ee:bb:39:44:0e:47:3c:78:9b:
0a:d7:91:4a:5b:de:d8:15:ab:80:b4:a9:34:3e:46:59:78:96:
03:78:4c:cc:6b:6e:eb:61:3b:dd:75:5d:35:f2:b9:b8:e6:75:
fd:56:81:e8:13:e6:5d:4e:27:78:66:ee:55:e0:67:fe:73:4a:
9b:fc:47:9b:77:32:37:0e:e8:58:85:54:18:ad:f9:29:24:75:
6b:44:25:e3:a4:b3:60:8f:21:26:5b:33:94:2e:4f:bc:93:ab:
10:1a:c7:dc:18:5a:99:3d:90:8d:35:a9:a5:eb:79:af:74:ab:
9b:a8:79:5f:52:d3:a3:6d:01:1c:35:0c:27:08:97:7e:52:e6:
ef:b4:28:b6:ca:43:b8:4f:ce:f7:a1:fa:58:89:81:3f:a6:22:
09:a2:12:a2:8c:e5:b4:8e:1d:f8:63:61:9c:87:0f:81:c2:41:
2a:95:b9:b8:86:21:3b:8c:b3:30:d5:72:b3:70:b2:32:59:68:
87:6b:97:dc:67:fb:6e:1c:57:b8:28:23:bd:8a:d4:cf:c0:6e:
11:ff:b8:35:20:2b:2c:00:2c:16:b1:77:d8:38:32:d1:5b:0c:
82:a0:8b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:32 2025 by rpki-client