Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/89b75ad8-137c-3ec5-b60d-c398db1c04cd.roa
File: 89b75ad8-137c-3ec5-b60d-c398db1c04cd.roa (raw, json)
Hash identifier: me9L3L8848yOJspZl4Jg+7HIk0VFjGx7HzopxNcDC3o=
Subject key identifier: 59:7B:17:D0:41:0B:29:BB:CC:28:91:C9:76:C6:45:D8:1E:84:89:29
Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial: 010D0C9F432858483B4FFC4D1B0FE2FC264E9F00
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/89b75ad8-137c-3ec5-b60d-c398db1c04cd.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 4181
IP address blocks: 24.224.64.0/18 maxlen: 24
68.71.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:4f:fc:4d:1b:0f:e2:fc:26:4e:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=278ec907-f1a9-480e-8d6a-83a1888b74fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:7d:16:82:31:02:6b:40:5b:5d:c0:ad:d2:
9f:61:b8:70:93:7b:48:eb:75:c6:e5:4c:17:f4:5e:
83:f9:16:db:9a:88:f5:c8:bb:cc:ad:e0:e0:89:59:
76:f8:7a:80:47:bb:d6:c2:89:52:e9:5f:0d:2b:72:
9d:96:44:f4:ba:48:b6:67:13:77:39:07:fb:31:d8:
2a:29:e4:b1:4b:5f:24:55:b0:68:a0:a9:17:72:72:
f8:0b:3b:26:a6:77:5e:70:25:54:45:66:56:fd:9d:
b2:d8:39:13:95:bb:21:66:14:94:9a:bd:5a:51:c6:
a4:79:eb:86:d4:2a:fa:a1:5c:c4:9e:ea:3c:17:47:
e8:fd:92:4b:9d:3b:a9:5d:63:40:a0:8b:ff:60:f4:
e6:6a:b0:03:01:72:d4:96:ef:19:6c:4f:54:b8:fc:
80:83:64:16:96:16:41:cc:4c:d1:4c:27:5b:7c:6b:
7b:07:76:6b:39:df:40:da:f4:2a:96:44:b8:69:28:
cb:cb:d8:ee:d3:ad:41:6e:56:b7:3a:52:ef:57:f7:
58:d6:6a:6c:45:73:5c:88:dd:76:d9:c6:47:2d:cd:
46:9d:08:5c:b2:b4:ed:8e:5f:de:f4:44:4f:fa:85:
17:52:7f:72:00:c8:98:84:ff:3a:21:a0:45:44:b8:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7B:17:D0:41:0B:29:BB:CC:28:91:C9:76:C6:45:D8:1E:84:89:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/89b75ad8-137c-3ec5-b60d-c398db1c04cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
X509v3 Authority Key Identifier:
keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
sbgp-ipAddrBlock: critical
IPv4:
24.224.64.0/18
68.71.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:e5:67:6f:c6:d0:9b:b2:46:20:47:aa:ee:6c:51:2b:a1:ed:
6d:02:ca:91:b7:ff:aa:87:a8:bb:f0:6f:9b:ec:ef:ab:40:32:
90:53:d5:a0:42:bc:1f:1b:50:9e:16:ba:b0:03:b4:a6:e1:42:
e6:4c:35:84:25:92:18:b6:4e:0e:91:46:0c:64:96:25:83:e7:
f5:07:fe:21:d6:ab:72:92:e8:c5:3a:86:e5:3d:02:d0:2b:fa:
72:38:8f:6a:59:49:73:54:fc:7a:bf:a0:af:ea:ee:98:f5:bf:
78:59:a1:98:ca:24:ce:c8:c5:a8:41:78:48:04:e4:44:36:4f:
66:d7:e9:ca:50:08:e6:5b:87:86:b6:55:85:fd:ab:40:61:6f:
a0:58:77:e7:50:a9:d8:f2:1b:c1:88:c7:64:b2:71:af:01:6c:
c9:f9:27:7f:57:ae:d0:f3:22:6c:c9:0a:a1:fe:41:be:af:73:
fd:15:a9:e7:86:95:15:36:2c:02:71:32:98:e2:af:46:a0:dc:
de:eb:9e:85:c0:91:87:ba:9d:94:04:c5:ba:47:46:95:f3:aa:
50:f3:6d:61:11:62:f6:94:d7:8c:1c:44:75:fc:45:a0:f1:7c:
d6:79:4f:39:76:8a:19:25:64:8a:ad:f6:d0:fe:a1:2f:b1:41:
35:11:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:13:01 2025 by rpki-client