Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa
File: ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa (raw, json)
Hash identifier: hEMspHNk8PjA3kdhCbdQsFOMFC3FJLoc20ieomJqT/U=
Subject key identifier: AC:BE:E0:98:58:EC:6E:03:7E:90:39:DF:B8:DD:53:EA:E2:AE:21:4A
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F43285847F84F737D7DD29D52349C5B00
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 396253
IP address blocks: 97.64.56.0/22 maxlen: 22
104.225.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:73:7d:7d:d2:9d:52:34:9c:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=ab5a5927-c501-46e8-896d-5b9e8f21df47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:ca:aa:ee:94:f9:4c:1e:64:59:5d:ad:ea:
d0:81:1b:54:8d:f0:d5:f6:cb:6b:58:76:e0:9c:37:
7e:38:2d:d5:58:4b:36:2a:79:1b:69:02:07:99:1f:
94:cb:c4:b5:f5:a1:03:24:60:e5:d4:09:ae:16:99:
91:5b:5e:8b:db:08:9b:e6:03:79:22:ec:93:77:58:
de:b0:d0:cd:01:8e:24:ac:c3:0f:2e:d4:75:dd:a8:
b1:1c:a6:ca:71:70:16:96:5f:0d:e3:7b:56:db:9f:
d5:2c:30:2c:57:8f:c2:72:f1:db:1b:4c:93:f0:55:
50:8b:22:42:f2:b5:65:35:73:61:c2:56:97:73:7a:
fe:f7:2e:74:9b:ad:45:cf:30:43:4a:e7:9f:da:e4:
f0:2b:4d:f3:20:23:a9:e6:b3:db:cc:34:2b:c8:ac:
1d:85:aa:67:c1:6a:06:65:df:e9:0e:d5:38:61:fb:
c4:39:f7:92:3d:78:1e:36:46:3b:d4:86:70:c4:a6:
05:63:75:0b:82:f3:b7:4e:f0:b2:60:99:7b:61:3e:
a8:c9:f4:cf:9c:a7:53:36:aa:75:5a:21:7e:2e:5a:
86:48:0e:31:a4:ef:3b:38:10:3f:cf:83:e1:f9:e1:
01:ed:14:1e:29:4c:84:4c:ea:bd:df:46:18:33:4c:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BE:E0:98:58:EC:6E:03:7E:90:39:DF:B8:DD:53:EA:E2:AE:21:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.56.0/22
104.225.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:fe:5f:e3:ff:4b:f8:21:64:74:b3:17:7d:e6:da:a0:db:a7:
3f:6d:3f:3b:85:eb:08:c9:fb:be:6d:69:b3:85:7b:9d:1d:be:
00:de:a7:b6:f8:e8:15:17:b6:3c:01:ad:da:56:ca:2a:f2:a2:
9c:c1:2f:a4:42:db:50:68:0a:6b:5d:98:ba:68:21:67:b9:da:
84:a1:ef:0b:44:98:a6:9e:47:58:40:93:70:4c:84:50:1a:d7:
5c:fc:c5:ff:f2:ef:3e:67:35:0d:fc:e8:76:11:97:f2:47:2b:
06:95:70:f9:05:93:1c:02:e9:de:a5:9e:3b:bf:12:44:26:4e:
01:64:74:ea:28:17:47:66:14:43:12:dc:5f:f5:da:32:1c:07:
46:45:17:a0:65:3c:73:95:ad:f6:08:28:01:22:cc:36:fd:4c:
37:be:4a:a5:88:58:90:60:2f:b9:2c:8c:ae:a2:92:10:5c:db:
ca:f7:96:96:c0:4c:6b:f9:78:54:48:89:91:d5:ef:7f:9e:aa:
ae:3a:4b:a2:66:d7:36:83:00:41:a9:4a:40:92:be:58:5d:2a:
f7:67:da:72:c0:ea:1e:9e:5d:a3:33:d1:d2:86:63:3a:cd:88:
b0:90:ed:48:14:e0:bf:2d:df:20:9d:99:ec:68:aa:d0:c3:a2:
c7:24:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:32 2025 by rpki-client