Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6cada92a-c593-3d5c-9dec-b926efbc2809.roa
File: 6cada92a-c593-3d5c-9dec-b926efbc2809.roa (raw, json)
Hash identifier: 9LU/zwGOjk6Efj5V7lI1Huz+P85TDpyC56oA6hUM6kg=
Subject key identifier: D0:2C:80:20:FF:B2:34:CB:56:6C:88:0D:1C:DB:69:CE:49:91:F1:0B
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F432858484AAAE36FEE6389B416A97540
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6cada92a-c593-3d5c-9dec-b926efbc2809.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 13768
IP address blocks: 64.34.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e3:6f:ee:63:89:b4:16:a9:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=300db021-a1c8-48d4-835c-9613cf4aba79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:c3:75:28:ab:3b:d0:06:c0:f5:3a:e1:89:
9e:45:43:e4:b7:86:0b:47:10:55:68:14:3b:2d:01:
8e:9c:e5:3c:38:61:ac:7b:27:62:1e:2c:4c:ea:ac:
74:50:ae:92:5d:54:89:46:f9:a3:e2:97:dc:4d:49:
2d:39:3a:85:60:e1:cf:80:30:0f:31:fb:1a:5e:6c:
7b:13:a6:65:64:59:c7:0b:a0:20:d5:41:f3:70:30:
62:50:62:03:3c:61:11:53:7d:62:b0:c4:98:19:07:
d9:e1:10:c0:99:18:0b:10:32:4a:88:34:c0:ad:ed:
de:95:43:13:18:c8:2e:df:90:04:b9:08:29:36:f0:
9d:3b:26:26:2d:b2:e3:08:36:fe:c4:9b:56:78:9c:
2a:b2:08:07:e2:1b:d8:00:65:c0:d9:3e:48:69:5d:
c7:fc:f3:ca:e2:58:49:65:a4:c9:f8:c2:39:38:68:
b0:20:21:0b:93:e7:40:a0:9f:6e:a5:f0:d7:40:1c:
d4:f0:00:8d:f6:51:ba:88:e2:56:33:f5:c1:29:69:
23:30:c7:85:38:8b:e1:a9:74:bd:bb:48:f4:d2:ef:
e3:0d:8d:c0:31:42:aa:94:20:b6:7c:ba:7e:53:f3:
c1:c5:a1:c5:81:06:c8:de:84:92:6d:ae:9f:6a:53:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:80:20:FF:B2:34:CB:56:6C:88:0D:1C:DB:69:CE:49:91:F1:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6cada92a-c593-3d5c-9dec-b926efbc2809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.34.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:de:78:58:41:7f:22:0d:35:b7:94:85:4f:f6:e6:6b:2c:41:
67:95:21:74:48:7b:94:7e:ec:7f:20:15:66:a9:7f:6f:0f:2a:
6b:fc:8a:e0:ab:5f:9e:1c:59:d5:8a:60:5d:e1:c4:4b:6c:12:
f5:cd:2f:d4:a6:b5:9a:8e:c8:1b:bd:b6:43:91:1a:bd:e1:ec:
2c:b1:7c:30:48:7b:0f:6e:c3:29:81:d1:0e:a4:7c:5b:34:98:
33:10:81:f8:16:5a:1f:4b:16:d3:25:a6:e5:19:70:ef:5d:9d:
a1:cf:90:b3:1a:51:59:4e:93:f1:73:d8:45:f1:d1:e7:d5:c0:
e3:52:06:bb:5b:d3:e4:41:5f:cd:7e:2e:e1:1d:c6:57:2b:04:
34:67:a4:85:57:fa:16:06:f2:96:8f:e9:60:ba:2f:93:85:c5:
4d:4d:9c:a5:bb:61:70:43:14:5c:3c:74:1d:66:6a:4e:44:96:
34:1b:25:56:9d:06:a5:63:30:b2:c3:c2:13:6e:5f:6d:7c:f1:
29:45:9a:7e:bf:a3:14:ec:c5:1a:db:85:4a:10:4f:c3:ce:0e:
eb:5c:e1:b9:c8:11:c3:85:14:0b:e6:fe:97:6c:53:a8:2c:b7:
d9:4a:57:d8:93:35:77:a7:9b:95:a7:ca:bc:c7:ef:a5:89:cc:
c4:13:a6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:17:27 2025 by rpki-client