Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa
File: 1dfb0410-c853-3b79-abaa-0f67acc343b1.roa (raw, json)
Hash identifier: KJdOFXxH1YhsR/Xz0YovAmP4pj/IhUkNxKVFXY5LpNM=
Subject key identifier: AB:91:10:C6:CF:28:2E:92:6C:8D:1C:1E:18:4A:AE:96:3E:A5:FC:C3
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F43285848037B62E8A12A791289B56B80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11537
IP address blocks: 64.57.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:62:e8:a1:2a:79:12:89:b5:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=1f1efd4b-bebd-45b9-947d-d6773b2128fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:60:10:63:b0:77:71:f0:0a:84:ce:22:af:
63:32:f1:fc:d5:14:6b:d4:b7:f4:b6:6e:f0:8f:7b:
2e:2c:22:0b:02:eb:25:97:9b:62:52:a1:5d:f1:2b:
da:c1:ca:73:09:09:6f:bc:e3:3f:66:a6:f7:0d:44:
10:de:a6:04:b6:94:ae:48:9e:7a:36:b6:f6:c3:fa:
98:d4:1f:56:6d:17:fb:60:1c:5d:b1:b2:29:cb:fd:
e7:30:99:9b:87:78:c4:f9:e0:66:08:02:9c:22:1f:
db:fc:3b:85:79:19:b8:b3:7e:1c:df:95:45:5b:dc:
8e:84:9d:57:eb:b4:ac:66:ab:43:63:4d:a9:9a:49:
1a:0f:aa:ee:b4:63:55:f1:12:db:1b:e8:36:46:b7:
c7:8a:8d:6d:b5:0d:c3:09:ed:82:70:f2:64:8a:63:
8a:62:79:26:8c:bc:f6:65:09:b9:ef:0a:e4:a9:dd:
4b:f9:78:65:73:1d:18:68:3f:dc:d1:a1:a9:25:a9:
44:c5:7e:c5:b0:7c:28:b2:25:e6:33:1f:34:71:08:
02:a2:49:b1:53:65:2f:ee:9c:ab:66:e1:c2:a7:bc:
cf:70:2c:e5:e0:3e:8e:ac:f5:56:65:8e:41:1f:14:
72:68:b8:e7:5e:d2:b0:51:6e:30:a5:1e:93:3e:be:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:10:C6:CF:28:2E:92:6C:8D:1C:1E:18:4A:AE:96:3E:A5:FC:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1dfb0410-c853-3b79-abaa-0f67acc343b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
64.57.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:a0:1c:3f:a4:b3:29:09:c5:25:63:3d:9f:b8:7e:a1:b1:6e:
ae:21:35:04:ed:0f:fc:d5:19:39:55:d0:10:88:59:c5:d5:68:
21:43:34:2b:5d:96:a0:6f:98:e8:ab:e0:bd:95:4f:29:99:ba:
a9:86:83:2d:a2:a2:d0:ae:a1:4b:0a:eb:23:36:56:a3:72:01:
f7:fb:bc:79:80:b7:5f:d7:85:6d:4a:c5:f1:98:f2:6a:c4:6f:
aa:91:b7:13:8f:79:2f:2d:5b:4b:58:4a:11:21:e5:9a:9d:2a:
89:17:cb:81:ad:b8:bd:35:4a:53:fa:d4:24:99:7f:65:ab:88:
67:ca:f5:c0:46:d9:c8:c8:76:98:3c:a7:29:61:9f:f0:c0:9c:
58:e5:ef:71:fd:44:5a:d3:b9:39:fc:f5:cd:b1:0c:b3:ea:36:
a1:18:2f:ea:9f:8b:01:fe:6f:da:81:15:10:ee:5b:5e:fb:e5:
8c:a5:a2:79:e5:28:2a:0c:aa:71:32:01:28:cf:50:f8:36:5a:
ca:fb:14:59:cd:b4:f2:21:08:83:bc:21:ff:b2:03:b2:b9:b7:
43:03:4b:53:9c:20:49:f0:ff:9f:76:81:db:e9:fe:5f:6a:66:
01:63:8e:8f:9e:37:d8:08:7e:1b:3f:7d:ed:ae:84:0b:d3:b1:
11:7a:6a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:59:51 2025 by rpki-client