Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa
File: 01b562f0-b1c7-3eae-99a1-f153b793addc.roa (raw, json)
Hash identifier: 5OvvMtMSHb6rDzKc5gJAbODK0wgKdnuqjc2Syzuk/y0=
Subject key identifier: AB:19:D0:03:21:80:AA:00:B7:C2:6B:4A:AB:2D:3D:00:DE:BD:15:58
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F432858484D759070C6A03A9A48FD3880
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 13768
IP address blocks: 64.34.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:90:70:c6:a0:3a:9a:48:fd:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=8231b243-108a-4a89-8c7e-9a81b4c48604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:1b:ab:6e:61:07:cb:2f:f7:ed:db:d1:27:
46:20:b6:a9:9c:6d:8d:fc:4c:74:9b:7b:d1:17:5f:
fd:e2:bd:2d:f8:89:f2:1a:3f:7e:c8:9f:7d:3c:25:
1c:66:8f:8e:ca:6c:69:46:2e:e7:68:94:36:e3:3a:
b4:6d:f8:64:29:e2:26:dd:c8:a5:45:0f:0c:67:03:
fc:01:ce:2a:02:1c:cc:7b:ce:0e:ab:8f:44:14:93:
57:b5:49:f6:09:3a:67:ef:4a:7a:5a:fc:80:0f:9e:
e0:43:85:ad:30:47:63:42:52:85:dc:32:03:a3:55:
00:34:d3:fe:fa:b4:c3:5d:20:40:a9:c9:8c:26:39:
8d:b6:2f:36:b6:e2:7b:22:1d:c5:47:a1:f0:ae:75:
9f:2c:c8:5b:69:19:25:80:d8:f1:79:8d:14:8c:d0:
de:7f:e9:c9:69:eb:46:c9:ac:6e:98:a7:ef:2c:d4:
cd:db:38:33:7d:d8:ce:e9:9d:95:39:45:a8:74:2b:
41:33:2d:94:b8:bb:d3:55:72:8c:0a:e3:0d:ad:19:
6e:5e:e3:53:49:3e:97:9f:2f:3b:23:99:06:0a:8b:
69:30:ea:7d:b8:59:ad:86:2a:fc:28:70:dc:9c:96:
45:56:f3:b7:eb:51:6c:48:ad:34:dc:ea:2f:e0:92:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:19:D0:03:21:80:AA:00:B7:C2:6B:4A:AB:2D:3D:00:DE:BD:15:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.34.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:3c:31:89:bd:4d:73:7a:84:3f:02:1e:b0:2a:4a:9b:39:8a:
48:2d:06:bc:9c:0c:26:7d:e2:81:7c:a8:0e:76:0c:78:94:b0:
ff:7b:98:aa:6e:e4:5a:f5:c8:9f:cb:d5:83:4b:b8:31:12:6e:
23:bf:22:04:70:5f:ae:54:dd:08:4e:6d:c3:6a:33:38:3a:c4:
c9:3d:dc:03:4f:74:0a:5b:31:7b:b4:a6:29:80:5d:b7:65:d1:
e4:7e:d4:db:83:c1:8e:21:a3:a2:99:76:34:f3:d8:7a:89:d4:
ae:d3:70:55:1e:59:4d:50:bf:2e:87:07:45:28:1f:be:68:12:
02:9d:58:f9:cb:99:44:95:80:ce:18:23:04:5b:a9:d5:fa:b7:
39:fe:51:70:77:14:33:62:26:35:5c:5d:77:f6:1b:75:85:a1:
e6:17:df:21:a9:45:c4:8b:01:77:fa:51:e6:6c:d8:1c:44:5e:
25:99:34:b2:6d:bc:82:43:bb:e9:1c:94:e7:5e:50:fd:11:5d:
34:6c:2c:d0:d5:85:10:78:18:83:45:bb:fb:57:44:22:f2:c9:
51:55:35:da:b2:41:8b:b9:1a:d5:b7:69:0e:bb:9c:07:de:e7:
4f:81:e0:1c:ac:69:d3:e3:51:6f:73:f5:61:72:1e:0d:dc:7a:
4f:35:c4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:59 2025 by rpki-client