Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dab1331a-4269-3d35-9330-184ddf84b5d0.roa
File: dab1331a-4269-3d35-9330-184ddf84b5d0.roa (raw, json)
Hash identifier: oYd93guQmzH9WgQMuKeRY6R+Pd8nPsKOADL62tR6QFM=
Subject key identifier: E1:3F:FD:58:85:C6:FB:4F:00:9D:F5:3D:66:46:43:9D:5F:00:A5:B6
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F43285848BE861B5F4D76C8C4E21F25E0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dab1331a-4269-3d35-9330-184ddf84b5d0.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 30058
IP address blocks: 67.159.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:1b:5f:4d:76:c8:c4:e2:1f:25:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=d2089c8b-ec86-49c5-9dfb-bb65b2958412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:fa:98:47:2f:35:21:f3:ce:bf:68:37:7d:
10:31:0b:3e:3a:36:b0:d9:b0:c7:08:5b:af:08:49:
9f:cd:b7:65:5b:fc:b1:27:26:6f:2b:11:bb:c6:c2:
8d:c2:38:ff:59:fa:59:8c:71:b0:e8:82:15:7f:78:
1b:5e:b8:16:79:65:37:da:a8:c6:31:67:ed:86:c4:
ec:c9:4e:6b:a1:e2:ce:16:69:48:9e:bc:44:28:13:
12:3e:39:93:b7:09:e8:37:f3:00:8e:b4:bf:a4:51:
e7:ce:bb:6d:83:12:d3:61:73:06:92:3d:42:5d:2d:
1e:0d:42:4c:78:21:60:b2:e5:8e:31:82:02:0c:68:
89:98:93:3c:48:8e:e7:0e:6b:b4:bd:6b:f3:7a:9c:
d8:8e:86:5f:68:c9:39:11:6c:0d:21:b3:92:fa:a4:
b2:68:fa:ce:3d:f6:e1:00:22:aa:f9:9a:e7:40:ff:
ea:02:89:7c:5f:a0:ce:7a:4d:e3:99:06:dc:fb:3a:
5c:17:ad:ca:9d:30:72:73:51:b7:76:fb:e2:d1:89:
3a:1d:6d:68:8d:2e:e1:4c:1b:c1:58:61:a8:9f:cb:
0e:ae:3e:94:a0:d9:12:cc:d3:7a:7f:0d:de:1f:91:
d4:8b:ff:3e:1e:f7:41:b4:ea:68:8e:87:d6:d2:09:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3F:FD:58:85:C6:FB:4F:00:9D:F5:3D:66:46:43:9D:5F:00:A5:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dab1331a-4269-3d35-9330-184ddf84b5d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:e4:97:7c:19:4d:5c:5a:0f:51:36:5e:e9:47:d9:be:25:cf:
05:c5:a2:2f:a9:d3:fd:05:aa:a4:b9:f0:33:d5:23:7e:33:5e:
ee:02:f5:b7:fe:fd:cc:86:e8:5f:8f:7e:1a:a8:86:7f:1a:6f:
cd:be:30:f5:30:2e:92:5b:ae:13:5b:14:a6:80:f3:94:f7:5b:
6c:f4:98:ec:53:48:a0:2b:61:9f:e5:33:fa:77:d3:db:4d:8a:
82:e9:f8:1d:2d:4a:8b:95:74:0d:53:aa:c4:ef:1c:02:20:c0:
9d:96:f9:8e:21:dd:b6:e9:a9:e6:7d:da:58:85:19:ab:a6:11:
8b:17:70:9c:87:41:6c:ce:f4:89:94:4c:df:3d:d6:5f:8c:66:
14:b3:5c:48:38:6d:5f:6d:bc:bf:f0:e9:35:10:6c:92:98:d9:
1e:53:3b:40:68:6f:fc:fd:72:bb:86:50:f4:57:ea:13:13:31:
7a:4c:62:dd:71:a5:e3:2d:33:40:c3:6c:60:98:26:73:72:3f:
3f:b8:65:7f:9f:4d:03:8e:38:03:af:93:d3:38:85:96:9d:bb:
51:5f:29:df:2c:7b:cf:14:b1:a0:de:29:a4:1b:ab:ba:38:e9:
5a:00:b8:c5:dc:53:e9:a2:0d:a0:66:5c:1d:6e:7c:31:d8:de:
65:b4:4d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:40:38 2025 by rpki-client