Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fccf4e1-4d5d-3e59-b2a2-789d0c1be580.roa
File: 8fccf4e1-4d5d-3e59-b2a2-789d0c1be580.roa (raw, json)
Hash identifier: D0MGlRXlf6HCzcT58e5QbDDru/I0zhb7GRVyTcbHSY4=
Subject key identifier: B6:96:94:65:21:3F:5E:1C:64:F5:86:EA:D7:F5:FB:34:C7:A5:E8:4A
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480EA520B88A9B404EB94895E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fccf4e1-4d5d-3e59-b2a2-789d0c1be580.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 7342
IP address blocks: 64.6.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:20:b8:8a:9b:40:4e:b9:48:95:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=1031bce7-ad93-43b9-a28f-5226bd502595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:ea:f6:a0:f0:1d:08:e7:ab:bd:d9:10:18:
fc:c2:ec:b2:ab:58:09:7c:b7:92:06:cd:d6:2f:c6:
0a:ea:09:30:bd:a1:d0:41:a8:66:ec:94:86:80:e1:
6d:23:57:13:31:06:27:71:14:29:0e:d4:30:54:03:
12:8e:7d:18:8f:d5:5d:89:6d:dc:6e:ce:db:6f:41:
8d:f5:14:fd:48:c3:43:cb:55:96:f9:52:e2:bb:88:
16:0e:7e:b9:0d:59:01:60:3d:b4:0a:13:4a:ed:0d:
02:f8:32:e8:19:fd:41:d1:62:b6:c4:97:f7:25:18:
77:79:91:a0:50:5f:a5:26:76:3e:d2:01:08:c1:16:
22:e9:6a:f7:33:a3:0f:5b:47:6e:95:31:ba:58:2b:
88:af:90:a3:52:40:37:05:9b:20:d3:5c:ac:68:32:
6e:5a:e3:45:77:54:0f:b8:4a:58:41:e6:ec:fc:fd:
b5:99:07:40:68:c1:38:98:79:1b:2b:b7:4f:5f:f8:
39:49:95:bc:69:68:57:07:20:6a:6f:53:44:d9:d7:
b6:77:b4:0b:cc:d3:03:5d:9e:1c:cb:f0:8d:a9:61:
51:88:b4:d4:2e:48:fd:87:9c:87:70:e7:f2:27:80:
cd:65:a9:8c:95:37:85:e1:6b:ea:e6:e2:0e:c1:4c:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:96:94:65:21:3F:5E:1C:64:F5:86:EA:D7:F5:FB:34:C7:A5:E8:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fccf4e1-4d5d-3e59-b2a2-789d0c1be580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.6.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:42:f4:a6:23:aa:e6:59:76:81:a8:56:63:fd:36:ae:04:fe:
5a:3c:05:ee:60:cf:d2:d7:e2:1e:8e:d1:20:7f:87:8e:65:3c:
36:a1:2f:f4:0f:74:7a:05:dc:1e:77:ae:ff:d4:30:59:ab:d9:
b9:b6:d0:5e:2a:99:97:81:c6:1d:55:12:f3:1d:c6:0f:4d:5d:
fc:bb:17:fc:85:67:08:d9:a3:ae:9b:e1:17:fa:cb:8a:e0:59:
a1:77:3c:a8:52:e2:b5:39:69:11:b2:f6:ab:ff:9e:60:8b:f8:
fc:a2:5a:f4:a5:e0:7d:d2:74:d8:c0:c7:da:bd:de:85:60:9f:
3e:b5:53:c9:96:77:76:96:e8:09:95:28:89:b0:3d:e7:b8:cb:
a1:fc:39:81:46:10:c3:ac:db:68:3c:6a:c9:0c:2e:f6:09:ae:
68:1c:79:a0:84:b0:5d:a8:de:b4:a2:66:6f:38:a9:d6:21:93:
89:ac:62:80:08:36:72:34:c1:57:56:00:57:f7:7c:6b:1c:a0:
e5:e1:ba:0e:0f:8d:87:95:4f:b4:32:77:b8:77:36:21:ca:73:
be:d2:c1:99:6b:35:30:bd:6c:02:de:8b:fc:2e:dd:64:2e:2b:
2b:92:96:d1:c8:36:07:ac:64:01:59:ea:bf:b9:71:d8:3e:f2:
bd:fc:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:24 2025 by rpki-client