Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/09b6f40e-beb0-38bf-81fa-4adc48720b1e.roa
File: 09b6f40e-beb0-38bf-81fa-4adc48720b1e.roa (raw, json)
Hash identifier: /4ajYragAzCi833YQXbIXYEpDkTTJJoO58NqvYUm3ZQ=
Subject key identifier: 86:CB:2D:ED:7E:23:20:31:FF:E5:E1:B6:72:44:F9:9C:41:D9:F1:D5
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F432858488815E8749EF4810501CA7B00
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/09b6f40e-beb0-38bf-81fa-4adc48720b1e.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 32133
IP address blocks: 64.98.16.0/20 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e8:74:9e:f4:81:05:01:ca:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=6f76f8a7-33f9-49ad-88be-eb6abcdc0a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:cc:64:13:ff:fb:71:59:32:29:14:75:73:
6d:51:32:9d:17:d4:0c:e7:8a:50:aa:85:19:0c:ed:
35:b7:4c:37:6c:63:9b:73:6d:0e:39:d1:46:ed:d7:
36:cb:2e:c1:22:f4:74:f9:eb:f6:b1:1c:11:3f:f9:
3d:2a:1a:68:1b:12:a5:98:9f:b8:e7:90:f3:8d:92:
17:b6:37:af:c3:05:26:14:4a:3d:c2:71:97:77:3a:
e0:aa:a1:ff:0a:1e:52:c0:4c:25:8d:6d:ad:0f:4b:
bd:5f:1f:d1:e7:61:3a:8f:de:a5:45:fc:87:e4:f9:
07:c5:5f:82:8f:3d:e9:91:98:71:b8:09:09:73:70:
a9:86:96:2c:99:43:1c:ff:56:a7:26:83:74:fe:68:
5a:41:aa:5d:8c:53:05:0b:61:ef:15:50:42:bc:11:
7d:c3:14:dc:1d:9e:93:5d:e1:11:5b:fc:f9:ab:e2:
ff:36:6a:82:13:5f:c6:a9:6d:b3:5c:93:c0:a1:ae:
ab:e9:7e:2b:e9:f8:25:db:79:1c:a4:01:cd:bd:86:
12:0f:3c:8e:b6:75:40:03:f4:b8:72:35:53:6b:a4:
a5:43:13:36:96:7e:34:69:34:eb:18:81:4e:15:e0:
e1:6c:5e:13:f4:81:e2:67:c6:45:11:d4:38:3b:af:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CB:2D:ED:7E:23:20:31:FF:E5:E1:B6:72:44:F9:9C:41:D9:F1:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/09b6f40e-beb0-38bf-81fa-4adc48720b1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.98.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:81:74:77:6f:bd:bb:38:b3:7d:67:b8:09:7d:3f:25:0e:e0:
65:a6:12:10:25:41:37:2f:62:d3:ba:1d:fe:b3:67:47:ff:3b:
0c:f0:8e:64:a4:df:28:c7:29:02:f4:83:c5:be:f9:52:74:23:
80:f9:e9:03:ff:d5:c5:7d:3a:23:ff:31:55:4f:ba:f0:1e:9f:
d4:b2:62:69:5a:c1:08:15:d1:3e:08:13:83:9f:f3:0a:49:3e:
b5:1d:c6:c0:2c:aa:83:5a:e3:c0:51:52:bb:a3:26:1a:e8:bb:
3f:a1:17:ec:6a:5e:92:c7:03:f5:d6:72:dc:50:90:78:ef:75:
9a:fc:12:89:fe:e8:d9:37:34:b9:6d:54:8d:49:b3:3a:85:c9:
75:19:4e:45:75:8f:fe:be:32:02:72:c4:7b:7c:ad:29:c3:38:
7b:b8:2e:2b:00:2d:51:fd:1e:a4:0a:7c:b5:fe:c8:c3:7d:67:
e5:71:20:20:51:53:ae:ec:45:27:93:6f:2b:d2:26:f8:9a:63:
16:d3:e2:85:84:e2:be:6e:aa:f1:ee:35:1c:7d:0f:a2:c0:cc:
54:a9:c7:32:4a:26:e3:d9:8b:b1:af:3a:cf:94:41:08:71:8a:
e6:a3:ec:db:89:03:9a:07:a7:82:d0:52:43:da:71:d5:c8:24:
1f:ac:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:41 2025 by rpki-client