Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/07cc39fa-fd0b-3af5-a43f-059f54b9123f.roa
File: 07cc39fa-fd0b-3af5-a43f-059f54b9123f.roa (raw, json)
Hash identifier: KZ3FDd+/s0XuUpgn0dlcOSa6YEVHaGpm0EA/2mKytPc=
Subject key identifier: 70:3D:F6:E5:F6:48:70:8A:E0:12:83:74:27:F9:42:D6:89:8B:03:C8
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F43285848BE862E895498C4C61D3F6F00
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/07cc39fa-fd0b-3af5-a43f-059f54b9123f.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 13445
IP address blocks: 144.196.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:2e:89:54:98:c4:c6:1d:3f:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=dfd54035-9f99-4f38-9160-9b5f9d8f257e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:50:ca:50:e6:34:b1:0c:54:d2:e7:74:d0:
1e:7e:27:01:bc:6d:f4:bf:cb:b7:5d:9a:69:1c:2c:
96:ed:f7:04:c4:de:26:86:05:00:93:6c:94:e8:57:
d5:11:b4:8b:d4:05:5a:4d:ae:f5:34:71:b2:52:1e:
21:b7:38:6d:17:ba:98:19:0b:de:b7:60:eb:36:f5:
05:68:3f:b4:21:10:45:f9:55:1c:a6:ef:9d:67:55:
36:e6:d5:cf:97:f6:fb:e8:23:db:c4:c8:1e:e0:8b:
77:22:df:1b:64:70:0c:93:31:66:ab:7b:66:d7:b4:
9f:6c:1f:11:df:ef:3f:6a:eb:aa:f0:f7:44:9a:58:
ef:1d:33:aa:19:2c:aa:ee:26:4f:17:de:a4:d7:14:
d8:21:e3:97:c5:a6:31:fa:89:ae:8f:fb:13:11:59:
93:d9:39:0a:b2:3f:40:7f:ac:8b:86:d6:21:72:ce:
47:a4:63:52:3f:e5:e8:32:94:af:3c:eb:d2:ba:40:
e0:71:9c:e8:21:6b:08:ac:92:9e:75:c9:28:77:00:
1e:23:d0:05:62:8c:ec:2b:43:20:8e:4a:ca:34:9d:
7f:f0:40:59:9f:34:1d:88:8c:2d:94:09:f7:0c:94:
63:90:d9:67:7e:14:21:6f:56:5b:10:52:84:61:c4:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3D:F6:E5:F6:48:70:8A:E0:12:83:74:27:F9:42:D6:89:8B:03:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/07cc39fa-fd0b-3af5-a43f-059f54b9123f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv4:
144.196.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:87:b3:9b:12:fc:aa:6b:3a:ba:7e:3a:ef:c6:64:14:49:d9:
4a:b6:de:b9:8f:93:61:55:3f:73:87:34:c2:c9:80:c2:0e:0f:
fe:80:6e:92:56:dc:90:45:ba:9b:0f:20:f9:05:d3:b1:1e:a8:
f8:14:93:98:b6:7b:a5:56:2f:46:f0:58:2a:af:33:e9:62:8e:
41:b7:eb:ff:f3:9e:e4:56:7c:d9:c2:f4:c3:1b:9b:49:9a:ef:
88:9b:57:4f:d6:f8:c5:50:62:a5:d7:89:42:94:f5:da:41:47:
9d:fe:b3:ab:07:d8:c8:b2:0d:6b:c2:ce:9c:35:55:c6:36:6f:
38:a0:05:f2:7b:ed:77:6d:40:6e:ef:0b:3c:3d:61:1a:21:75:
45:16:40:d7:e7:16:ec:a3:c6:7a:3e:fa:d9:af:30:af:8e:e8:
64:1b:e4:e5:a7:4b:09:60:68:aa:90:9d:45:43:f7:b0:63:e1:
14:19:f9:13:24:63:88:5a:5a:ab:6a:df:1c:12:cf:d3:65:47:
4d:d9:6c:06:1d:2e:67:fa:54:5e:23:33:43:f4:3f:e7:f6:e3:
f7:00:7b:82:5b:fc:94:0c:4d:90:17:13:f9:64:ce:de:e4:60:
5a:9f:7a:f1:79:91:e6:d7:09:c7:a8:07:fe:d3:ea:05:3a:ec:
68:a1:1e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:08 2025 by rpki-client