Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/a2c0ab8f-f1ed-34c6-9063-bcc6e94fb911.roa
File: a2c0ab8f-f1ed-34c6-9063-bcc6e94fb911.roa (raw, json)
Hash identifier: NlirL2Af3/cwNDZEe514KX/NWT1BhSF2i3v4BdXbHT8=
Subject key identifier: 3A:53:61:36:A1:9A:AD:3C:CE:C6:64:5E:A0:6A:E6:73:D1:AA:39:A2
Certificate issuer: /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial: 010D0C9F43285848F22C6F6012E9C86470C8DC40
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/a2c0ab8f-f1ed-34c6-9063-bcc6e94fb911.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 35874
IP address blocks: 69.58.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:6f:60:12:e9:c8:64:70:c8:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=bb7fa980-49a9-4c76-b453-22e1dd35b8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:d9:2c:a3:3b:7b:73:78:0e:83:b1:89:c7:
58:db:55:0b:2f:c8:39:f4:ad:9b:d3:fd:29:bd:5c:
c0:09:37:bc:e3:43:b1:b8:b7:0d:dd:0f:a4:54:d1:
bc:c1:91:c4:02:40:33:34:47:7a:4d:50:5a:d2:14:
44:85:03:ce:0b:e1:76:25:74:d7:7d:3d:2f:3c:e2:
9b:df:4e:b3:d2:0a:93:02:01:04:7a:51:78:ab:d2:
89:9f:bc:c3:c7:3f:b7:bd:41:aa:60:d1:83:8c:f5:
d7:7b:f1:c3:49:8e:cc:98:03:9a:60:70:49:38:a2:
ad:c4:ef:1e:ea:8e:e6:75:20:ce:4e:4a:f5:47:bd:
d7:b0:62:31:b4:88:52:a3:c5:5e:e7:28:cc:a5:20:
85:27:54:3f:09:ad:ad:00:58:56:a9:b1:3c:df:18:
42:92:42:86:5a:e7:d9:1d:e7:de:bb:7e:13:19:00:
f3:9e:c4:c1:cf:ef:24:c2:dc:28:35:fd:81:47:1a:
dc:eb:85:03:5c:ad:94:fd:5f:f6:08:84:21:ea:5c:
b6:32:de:92:85:92:fe:3b:4a:a5:3b:a6:b3:71:c6:
e9:f2:ec:44:ce:9e:2b:94:24:81:3e:12:51:80:0b:
40:69:eb:1e:e7:0c:fd:63:46:9b:fd:88:65:60:06:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:53:61:36:A1:9A:AD:3C:CE:C6:64:5E:A0:6A:E6:73:D1:AA:39:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/a2c0ab8f-f1ed-34c6-9063-bcc6e94fb911.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
X509v3 Authority Key Identifier:
keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
sbgp-ipAddrBlock: critical
IPv4:
69.58.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:25:26:84:77:26:f5:25:e6:77:9e:1c:c2:36:c7:28:3e:2a:
e8:1e:60:80:da:a4:2a:b9:ca:74:f5:bb:7b:58:86:60:6f:6d:
07:de:5a:82:b6:da:72:fb:12:20:78:fd:b1:77:c7:60:19:b6:
79:47:80:7c:dd:b0:c9:9b:8f:b6:0e:c2:68:27:9e:86:1b:af:
7f:aa:8d:73:aa:d4:6c:6a:41:b3:51:97:5d:06:8e:ee:d1:ca:
73:9f:f2:19:45:6b:6b:6b:84:90:4c:5a:50:52:3e:a5:79:5d:
16:0e:86:0e:92:99:6a:68:be:0f:48:42:64:76:53:ca:ac:12:
d8:4c:8f:a0:4d:19:ab:00:e6:18:64:43:0e:60:25:46:08:46:
ad:6b:f6:57:f6:88:eb:a6:29:96:17:31:79:8a:37:60:28:60:
ab:6b:6e:53:54:20:4c:39:dd:e8:ae:c6:9e:a6:a3:f9:b6:2a:
f4:54:aa:e1:09:f3:31:8b:36:8e:0b:c5:e9:54:c0:cc:df:80:
a9:b1:67:07:1a:ed:a9:c4:bf:2d:8c:94:34:52:22:a4:f1:78:
ba:81:f6:8d:27:35:27:01:7f:0d:3a:09:30:31:05:08:5f:7a:
85:69:7a:b2:da:f4:47:fc:7c:bc:23:0c:74:a5:ee:69:db:fb:
9d:20:c7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:43:33 2025 by rpki-client