Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/eecf817a-eb5d-3aac-82db-2668fc03ca0f.roa
File: eecf817a-eb5d-3aac-82db-2668fc03ca0f.roa (raw, json)
Hash identifier: 3yp/P9qVO4t8IQre4cafwyfEEPEWvdY2XDSBQpTn0UM=
Subject key identifier: BE:9D:BA:49:28:2B:E3:A4:27:47:AF:82:D7:F8:1D:4A:84:AA:4C:2C
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F4328584851A57B822ABAFAE21881BB80
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/eecf817a-eb5d-3aac-82db-2668fc03ca0f.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 16509
IP address blocks: 64.99.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7b:82:2a:ba:fa:e2:18:81:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=dc2a9938-1f2d-47b9-8737-1927582c26ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:05:c0:97:5c:f4:ac:9b:1d:52:bd:79:58:0b:
8c:36:b6:7a:33:ab:e8:fd:ee:f8:21:52:4a:df:98:
4d:7f:42:0c:b4:1d:fb:fa:97:5b:26:66:3b:46:28:
d3:ee:00:f5:69:b2:c8:2a:1c:ce:64:1f:2a:61:fd:
30:f3:c2:b9:42:01:e7:e7:8a:c3:57:89:ec:61:d9:
cd:d0:a5:d1:08:18:14:3a:cd:12:05:1f:ae:7d:8c:
09:a1:3d:84:a7:28:89:90:c5:98:73:16:77:cd:87:
69:dc:f5:20:7e:3a:18:53:e6:54:3e:5b:41:3b:29:
9d:cf:0d:99:d3:bb:f2:3c:c9:11:c2:1a:8c:f2:10:
da:2c:31:6c:17:95:aa:17:cc:e0:cf:52:ce:d9:15:
97:2a:5c:d4:b6:2e:3a:07:9b:bb:30:a7:5d:86:9d:
ae:0c:84:e6:3a:d4:78:b1:50:c9:42:c5:a8:54:0d:
74:6b:e7:c9:68:de:00:83:4e:04:ff:37:82:4e:df:
44:ab:dd:6c:df:7f:c0:82:7b:1b:77:4c:54:40:17:
76:dc:82:8a:9e:41:19:2b:b9:50:07:87:e4:4e:07:
ea:76:10:34:1b:18:67:98:02:77:e9:14:c1:c5:dc:
e6:4c:7a:0f:06:c0:a8:1c:41:07:54:23:bd:ba:37:
57:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9D:BA:49:28:2B:E3:A4:27:47:AF:82:D7:F8:1D:4A:84:AA:4C:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/eecf817a-eb5d-3aac-82db-2668fc03ca0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.99.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:b8:53:26:b6:17:64:43:95:6f:26:c8:23:97:89:e5:c8:c4:
09:f8:38:64:fe:02:37:91:a5:16:08:27:18:df:38:86:b5:92:
ab:d3:5b:c0:b7:9b:fb:3a:e5:2d:a7:7d:73:fb:8a:00:8e:60:
d1:f9:fe:9b:e4:8e:17:fb:64:54:6f:e6:e4:fe:60:e0:31:3a:
56:af:9e:03:e2:57:74:5d:8f:8a:a2:31:75:d7:d3:a4:ea:2a:
6c:eb:72:07:d4:85:9d:00:78:61:59:eb:a7:7d:14:25:ea:7f:
12:25:a3:c7:ae:26:aa:a1:b7:b9:a1:81:24:10:3b:c5:c9:12:
68:65:89:09:9b:59:d0:ae:55:f4:48:7e:fa:d1:d8:fc:bf:10:
cd:64:60:9a:62:84:f9:90:19:85:ac:3a:d0:ce:63:48:e9:e8:
c8:a5:92:3d:96:14:f7:c5:e2:a8:21:95:95:b3:50:90:5f:31:
b2:af:76:f9:db:6c:ff:41:0e:02:23:f3:7e:bc:fd:25:2e:ff:
7d:b0:65:65:39:b7:7b:52:8e:01:49:f9:87:47:d0:68:fa:fb:
cd:a8:de:2c:74:0c:13:e0:c8:79:13:2b:86:39:d4:64:f5:43:
d7:8f:e4:76:61:e8:8f:49:88:aa:45:e8:5b:1a:48:61:e7:eb:
b5:d9:c0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:19 2025 by rpki-client