Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/0e352be7-b541-3b45-bfce-f9c698c6b91c.roa
File: 0e352be7-b541-3b45-bfce-f9c698c6b91c.roa (raw, json)
Hash identifier: L1LSn+71VV1zLD6QY4sGyB+nBWoN9+6/4lmOFQYEH3M=
Subject key identifier: 72:70:B9:80:94:16:B2:ED:27:90:38:78:E8:07:C2:FF:BB:96:B8:A4
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F4328584845157FE8745CFD299EA7CE80
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/0e352be7-b541-3b45-bfce-f9c698c6b91c.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 14061
IP address blocks: 64.225.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:7f:e8:74:5c:fd:29:9e:a7:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=99773356-d4cf-4141-bdb5-9a2e430f6032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:83:92:f1:72:3f:ba:79:20:27:02:b2:1d:
45:f8:6e:ff:12:56:fe:ca:a2:4d:cd:28:fc:75:ca:
25:48:53:c6:99:ac:c1:41:35:67:f2:ad:17:35:dc:
3c:9e:43:2b:b7:78:8d:34:47:f5:79:72:5a:ab:db:
25:e6:db:4d:bf:e7:73:11:5c:ef:06:68:2d:87:0f:
94:ab:d0:2d:73:5b:3c:9d:35:37:c5:41:a5:9c:8c:
e7:10:dc:9a:9a:ef:3a:04:b7:90:73:3c:b8:39:c5:
1e:0d:80:86:6f:d3:50:d2:af:47:d1:58:3b:61:a3:
d6:93:41:99:19:25:c2:2a:3c:bc:69:38:0d:57:ad:
92:5e:9b:cd:59:31:a8:f7:6e:f1:80:b0:b0:3f:6a:
e1:a8:df:b6:90:22:99:c7:27:e1:51:61:e3:1a:d5:
75:cf:b9:e3:dd:a7:e4:c7:4e:54:3e:df:05:d0:9e:
ea:6a:74:78:78:a1:1d:f8:f8:c7:83:f9:73:a0:26:
f8:ba:ef:8f:b3:ca:08:b8:ec:35:05:26:19:0b:ea:
01:8d:18:47:07:f9:1c:74:2c:02:b3:87:4b:47:0b:
a0:48:e0:f3:98:16:a1:56:2d:ad:8a:fb:a6:ab:dd:
73:6e:d0:74:10:7d:39:52:07:07:ff:da:45:be:b7:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:70:B9:80:94:16:B2:ED:27:90:38:78:E8:07:C2:FF:BB:96:B8:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/0e352be7-b541-3b45-bfce-f9c698c6b91c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
64.225.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:97:d7:40:1b:ad:85:fe:7f:c8:3a:db:91:42:80:11:26:d5:
bf:b4:71:3a:72:d9:19:e8:4a:2f:c3:a5:d1:ea:16:2a:05:cb:
9b:ab:8e:bb:c6:31:4c:15:69:c5:f8:ff:21:2b:f0:f7:19:22:
de:29:05:c5:75:c4:aa:dd:c5:ef:fe:02:b6:21:67:25:86:59:
d8:f5:60:81:91:06:8d:79:cd:f5:3f:e0:76:f8:31:1f:7a:46:
bc:6d:57:1c:57:99:d8:36:cd:85:4d:54:02:9f:1f:ed:43:f0:
20:79:37:85:26:86:3e:ab:e4:fd:aa:b4:4a:5a:9a:70:6f:7c:
0d:40:23:e9:7e:a4:b8:1e:f5:94:c6:db:db:96:85:0b:08:0e:
c2:94:55:d7:fb:e8:22:aa:92:84:7e:48:d0:97:86:d0:58:3e:
d9:68:1d:38:1b:ac:5d:e2:04:c3:ef:3d:74:f2:76:0c:cf:e5:
5c:3f:7e:97:24:74:c4:b3:fc:66:12:9c:21:3c:83:a1:9a:07:
c9:2b:33:65:62:de:dd:fe:01:ae:e0:17:4a:60:eb:90:2e:95:
ad:0a:af:0f:11:b4:23:da:bf:97:f4:88:48:00:62:98:a2:5c:
b3:15:7b:71:be:31:2e:4f:db:51:99:6a:5f:65:4b:e5:78:6d:
f8:d3:1f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:40:42 2025 by rpki-client