Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/bc43eb96-6422-380c-9f25-98a56512ac46.roa
File: bc43eb96-6422-380c-9f25-98a56512ac46.roa (raw, json)
Hash identifier: Y1vNI6WmB7AZaMJhbuUW789ZoQouOz7cJfaZsld+plY=
Subject key identifier: DA:7E:09:80:3F:7D:01:4C:EC:09:30:EA:A3:25:B6:44:FE:56:EF:FE
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F43285848037B686D54591E9060FDE100
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/bc43eb96-6422-380c-9f25-98a56512ac46.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11537
IP address blocks: 64.57.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:68:6d:54:59:1e:90:60:fd:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=62ed7813-c892-4b97-bad7-c98960e50697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:24:a5:cf:24:14:13:51:d4:71:25:8f:5c:
d6:81:1d:2c:d3:c0:b7:ba:8f:02:94:4b:72:ab:8b:
f1:5c:28:e6:2b:80:90:b5:30:af:85:d7:56:f4:99:
99:8e:60:f0:6d:c7:13:3a:cc:07:e1:3c:77:62:ad:
5d:60:7c:65:94:8f:c6:e8:59:d9:58:7a:14:12:22:
aa:8b:05:97:9a:95:35:a6:3f:f1:20:07:66:3e:2d:
6d:a5:66:d7:1e:33:58:84:09:a0:c0:28:37:fd:76:
c1:e2:61:0a:1f:d9:d4:f2:f9:5f:e1:1b:40:3e:80:
3b:10:cd:46:40:9d:ff:86:69:45:16:cd:d0:09:d3:
60:b9:e2:c1:83:b5:f2:0e:08:3d:f4:b4:11:e7:5b:
63:eb:43:76:76:8c:6b:37:1c:06:26:a3:6d:97:df:
1d:e4:69:65:13:fb:1c:5a:e2:74:3e:8f:75:cb:df:
c8:86:a8:e8:b7:59:3a:22:f3:3e:e3:84:2a:e0:fb:
bb:ea:cf:70:e4:51:3f:c6:8c:7c:58:8e:57:4c:aa:
9e:6b:e9:54:5d:0a:94:af:81:99:b5:fb:ff:23:92:
ef:e1:99:3a:e5:e2:bf:5f:50:e6:17:9b:68:73:10:
fa:35:a7:b2:3d:ba:95:9d:c4:71:53:c2:50:26:5f:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7E:09:80:3F:7D:01:4C:EC:09:30:EA:A3:25:B6:44:FE:56:EF:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/bc43eb96-6422-380c-9f25-98a56512ac46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
64.57.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:ad:c7:b2:3b:15:25:f7:43:6f:38:c8:b1:94:93:59:5a:60:
b0:fb:16:ca:d0:cf:fb:0c:30:05:52:49:7c:c6:e0:d4:40:64:
fb:dc:a6:57:7e:04:35:a6:dd:77:a3:16:d7:38:25:78:70:50:
53:0a:a6:56:eb:7d:3d:92:4a:63:e2:4c:7f:e1:f9:8c:4f:d0:
b7:ab:4b:7c:df:63:07:ca:e6:11:cc:33:54:39:93:d2:9d:50:
71:c1:35:9b:fd:55:04:1f:c6:ff:f5:62:e5:39:a4:7c:b9:9e:
00:17:a9:b6:51:80:f5:f3:a5:66:ce:d4:32:b1:d3:d9:7b:fa:
bc:23:58:50:d4:42:5b:e0:c0:b0:51:08:47:11:bc:e1:b8:44:
42:c1:f5:ea:dc:dd:4f:7e:d1:86:e8:74:22:d2:98:2a:1a:31:
b9:14:2f:ca:3e:ee:ec:53:04:67:e4:52:c6:a9:16:18:9c:40:
93:f0:8b:c3:81:91:b3:60:af:bc:6e:8e:a3:2a:dc:97:a5:ce:
de:7e:ab:6a:4c:25:59:68:1e:a1:46:ba:62:75:67:30:a6:02:
39:53:f0:33:d9:a2:f4:eb:e5:c8:a7:16:3a:f0:25:c7:e7:f4:
77:3d:e0:6a:62:d8:7c:aa:7f:e8:2b:95:b3:51:05:52:6e:bb:
ef:d8:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:38:11 2025 by rpki-client