Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/2afe2567-cab2-360c-8f03-dbb24ef04992.roa
File: 2afe2567-cab2-360c-8f03-dbb24ef04992.roa (raw, json)
Hash identifier: P6FumgicYnoQm1qxhfJ9pcz9Y36Jfwp1vYK9MyfjeVY=
Subject key identifier: 71:B1:E8:5B:29:87:82:8D:28:15:9A:71:72:C3:15:55:1E:BB:4F:87
Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial: 010D0C9F43285847EEC49CC2E7A3FF226903FC80
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/2afe2567-cab2-360c-8f03-dbb24ef04992.roa
Signing time: Tue 19 Nov 2024 15:58:29 +0000
ROA not before: Tue 19 Nov 2024 15:58:29 +0000
ROA not after: Mon 17 Feb 2025 15:58:29 +0000
asID: 393474
IP address blocks: 64.90.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:c4:9c:c2:e7:a3:ff:22:69:03:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Validity
Not Before: Nov 19 15:58:29 2024 GMT
Not After : Feb 17 15:58:29 2025 GMT
Subject: CN=96851be8-1510-498a-8663-25b8600ea596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:4f:24:61:0c:17:e0:f8:be:51:bf:52:10:
3e:ff:1e:78:2b:4d:e4:7b:3b:f5:98:63:7d:53:d1:
0d:5a:2f:b2:cb:fc:ad:a3:89:df:0f:df:83:c8:0a:
09:25:00:8f:81:74:8e:9c:8f:a2:8a:95:1f:f4:cc:
4c:8f:61:83:56:33:5f:60:67:1d:59:70:a8:fa:37:
46:b9:c7:e7:36:60:1c:19:1e:3b:b2:20:c9:88:74:
82:ed:cb:7d:40:ca:2a:87:1d:12:83:ad:1d:16:f1:
af:b7:3f:4d:82:15:df:60:e9:0f:ab:dc:2c:ca:60:
ab:d2:06:90:fd:c2:eb:15:5e:44:43:85:1a:21:89:
0e:70:66:e1:a1:eb:ed:50:4f:4e:c4:6f:f3:39:34:
6e:96:79:91:be:df:91:d9:a8:8e:2c:24:3b:e8:4e:
26:e4:07:60:8e:e5:43:6a:91:1a:cd:0f:91:00:1a:
bf:aa:62:48:ec:0c:59:dc:90:c3:fe:7b:79:ee:32:
69:6d:1f:de:bf:40:b4:de:98:a6:6f:13:34:0b:07:
37:08:e6:12:e4:be:b7:18:7d:e6:e1:df:db:45:50:
42:cc:d3:a8:13:23:67:a8:ad:07:2b:88:6a:a0:df:
02:59:24:90:52:29:de:b3:f1:25:49:69:9c:e3:89:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B1:E8:5B:29:87:82:8D:28:15:9A:71:72:C3:15:55:1E:BB:4F:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/2afe2567-cab2-360c-8f03-dbb24ef04992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
X509v3 Authority Key Identifier:
keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
sbgp-ipAddrBlock: critical
IPv4:
64.90.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:8e:07:13:d5:d1:54:23:ca:cd:b5:52:54:33:f4:93:31:47:
1e:63:b1:b4:1d:2d:15:6d:99:be:5d:82:15:7f:75:16:c6:44:
11:0a:40:08:4d:9e:27:95:b4:a4:be:b4:80:91:dd:af:02:33:
c8:d6:27:08:4f:d8:a9:3e:37:2b:1c:0f:a3:16:f0:a1:8f:6a:
38:74:07:9d:d6:87:37:26:2f:cf:35:ae:38:43:9a:8d:ce:7a:
9f:55:31:6d:59:5b:70:1c:f9:bc:55:00:94:67:c1:04:33:3c:
23:3f:83:9f:d4:7a:2f:6f:25:1f:cd:07:41:27:cf:fc:41:bb:
96:0a:3f:35:e1:d1:71:b3:40:27:a2:55:33:4d:1f:d9:ab:50:
87:65:2b:60:d4:04:38:65:17:f6:33:cf:62:2a:60:bd:eb:b7:
97:30:e1:b9:bb:8c:ee:5c:08:fa:79:6f:83:27:22:74:24:7e:
df:ed:d4:21:71:4c:f3:b6:8c:3c:d0:67:35:16:d8:3f:3a:2c:
40:06:8c:51:53:26:82:e6:df:c5:1d:f0:fc:7c:e2:95:f3:41:
85:04:c9:8e:f4:e3:57:8b:a2:b0:99:1e:85:31:15:22:f5:58:
b7:b2:41:f0:6f:b0:2e:60:a7:4e:40:0b:39:86:3e:1a:60:01:
89:8f:39:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:00:06 2025 by rpki-client