Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa
File: b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa (raw, json)
Hash identifier: k2ZHvSimU/b09YiAAKvuowfbMNJrmhPxTeJGDLvC+/M=
Subject key identifier: 80:C7:66:6D:A1:BD:4F:EF:AB:1D:8F:38:DD:D1:B2:43:50:FF:69:F1
Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial: 010D0C9F4328584894A5E794EE5DF8BC630C1420
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 23465
IP address blocks: 70.96.220.0/22 maxlen: 22
70.97.86.0/23 maxlen: 23
70.97.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:e7:94:ee:5d:f8:bc:63:0c:14:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=5ac64130-ec29-400d-a7d0-8f562d58feb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:2a:2f:03:e8:64:1e:98:37:d1:00:d5:a2:
6a:93:8d:17:41:87:4c:41:51:83:b6:49:25:f0:8c:
f5:f3:a9:55:3f:6f:b8:cb:c5:2a:d7:3f:ad:2a:22:
b2:98:74:11:70:d9:c4:e0:af:75:69:0a:61:8d:52:
90:29:a4:34:18:52:6e:cc:2e:d1:0c:7f:bc:7e:05:
4e:8d:bb:f2:e3:9b:15:b5:5f:03:2d:8b:f6:ea:48:
23:a1:41:2f:26:64:64:7a:8c:e3:65:36:f0:e1:c4:
78:3f:c2:fe:24:82:ef:d6:7d:84:29:7d:1f:41:93:
05:ce:f6:ad:58:1b:bb:69:4d:9d:24:42:32:60:9f:
ec:77:ea:97:d1:88:80:0a:5b:f6:c2:28:d3:35:e3:
bb:89:13:2c:81:36:e9:00:ef:91:1c:84:3c:b5:40:
8e:44:9e:42:76:35:25:4b:87:fe:2b:7e:16:cf:7e:
1b:77:4d:e5:d1:1c:48:66:35:b6:81:ae:8f:49:de:
03:52:ef:b1:8e:ca:0d:61:1d:92:b2:41:a4:f8:f7:
64:2f:82:4b:60:61:ab:ac:c9:e0:db:2e:e1:e4:7c:
e7:97:74:32:4d:42:96:6c:59:9f:71:33:49:ce:08:
79:a4:ff:5c:24:9f:2d:28:b6:ad:4c:6b:56:a4:be:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C7:66:6D:A1:BD:4F:EF:AB:1D:8F:38:DD:D1:B2:43:50:FF:69:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
X509v3 Authority Key Identifier:
keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
sbgp-ipAddrBlock: critical
IPv4:
70.96.220.0/22
70.97.86.0/23
70.97.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:27:c6:3b:ac:fb:1b:8d:90:54:e0:cc:7f:e7:db:42:f4:f1:
b6:9a:24:1d:6b:96:08:a3:fd:76:50:8a:9d:65:70:10:5e:54:
e4:69:fc:10:e1:f1:cb:a9:94:23:4e:a8:0b:7e:7c:81:d1:94:
00:b6:9f:3d:0f:41:bf:96:eb:bd:07:3e:dc:fc:57:a1:40:b0:
65:d0:93:33:ba:0d:37:89:f9:56:78:59:40:08:00:6f:ae:2c:
37:af:8d:4a:4c:2c:f5:31:52:3d:fb:85:46:2c:f3:28:04:36:
cc:98:6b:cf:12:34:e3:fc:18:4e:b6:7e:7c:9f:d1:bb:52:82:
be:42:34:2f:33:9d:d4:28:67:cd:83:e5:f2:70:9d:4f:04:0e:
0c:5c:a5:9a:1d:7e:04:40:d5:81:21:ec:56:27:32:5d:a3:f6:
ea:6c:c2:92:47:70:60:a7:2d:b0:b7:e6:66:77:40:a2:b6:b1:
27:7c:98:ee:ee:b2:c8:91:d8:54:a4:ff:10:7a:2b:ee:4e:58:
c9:6c:28:b1:a4:17:7e:71:5c:23:cd:40:9e:b2:fa:60:01:35:
fd:45:48:8e:3a:81:67:28:b1:bb:80:b3:06:fe:27:96:3a:a7:
a0:f5:b9:81:83:96:3f:6b:c6:32:be:6d:3b:4c:f7:ad:3a:75:
ec:e5:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:14:49 2025 by rpki-client