Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1a9f91d6-83eb-3eb5-b7f4-ec60e8f4e05c.roa
File: 1a9f91d6-83eb-3eb5-b7f4-ec60e8f4e05c.roa (raw, json)
Hash identifier: xPZMqeTDKpv3rLGFw9fR2ZHzNAVF3w1K/DKZG/dlPoc=
Subject key identifier: 13:49:58:20:6C:AA:79:4A:3E:7E:20:F0:E7:B8:9C:0D:CB:51:E2:A2
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858486695B9C6756BBCB80DEA14E8
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1a9f91d6-83eb-3eb5-b7f4-ec60e8f4e05c.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 13414
IP address blocks: 64.63.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b9:c6:75:6b:bc:b8:0d:ea:14:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=65d147b1-e550-4049-a984-eba8ff01061a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:87:02:eb:4a:cd:aa:b6:53:f5:20:27:d0:
6f:35:b4:b2:79:de:85:75:83:77:1f:d1:c8:44:38:
8b:71:f3:a4:5f:f3:3d:16:c1:71:c7:1e:2f:aa:51:
6e:10:a9:76:dc:78:23:9e:6a:d9:b4:b7:9a:8e:51:
bc:cd:16:85:0a:12:d5:2a:e7:e6:f8:b3:46:f0:8b:
e4:99:7f:3f:05:87:65:1a:2c:cf:22:1a:b3:67:fa:
c6:3e:11:13:cb:89:f7:35:1b:bf:e9:6a:50:a6:78:
9c:5b:d4:19:75:9a:5e:9b:98:7d:e8:ab:5c:76:4d:
9a:67:6c:75:ed:58:01:69:3e:df:fb:0e:ab:5b:8b:
f9:eb:ed:5f:3e:69:ac:31:c2:87:11:f1:d2:f3:eb:
72:d1:60:90:cc:4c:35:a9:56:b9:58:48:5e:3f:63:
57:2e:5a:cf:d5:cc:66:b8:c2:4c:6f:6f:d8:dd:bf:
83:d7:f6:9d:f1:12:a1:8c:47:e9:8d:9d:29:e1:3a:
09:ea:9d:a2:f7:a7:48:5e:7c:32:cc:18:19:b9:15:
ee:e3:49:01:63:4a:e4:3d:6a:a9:04:d2:78:55:3d:
00:01:9b:6f:d0:03:3e:8a:e2:ee:93:af:4b:c0:c1:
74:db:4f:9a:b0:d7:3d:d3:08:06:f9:2e:58:cb:e2:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:49:58:20:6C:AA:79:4A:3E:7E:20:F0:E7:B8:9C:0D:CB:51:E2:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1a9f91d6-83eb-3eb5-b7f4-ec60e8f4e05c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
64.63.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:4b:d6:bc:f2:b5:6b:da:4c:14:bf:f3:02:16:1c:e1:b6:a6:
a3:ee:98:47:b6:83:a3:c1:62:a9:73:18:89:7a:10:c5:20:45:
d9:1e:82:9d:42:6f:30:ce:62:e1:a3:75:4a:3e:a7:90:fd:1a:
02:26:79:13:f4:13:53:4c:55:7e:85:70:7d:24:39:0b:4d:4f:
11:c3:b8:16:6c:2e:ac:3f:12:75:e2:5b:5f:4f:bc:a4:c9:a7:
48:43:bf:d9:0f:ad:0e:f3:dd:47:79:8d:62:3e:bd:67:b9:d6:
4d:b6:bb:24:ea:ce:e3:85:e3:3e:7b:e0:6c:1e:00:65:d5:88:
e4:15:8f:a8:64:a9:8c:4e:8d:7f:be:0a:9c:05:10:cd:15:9c:
b2:2a:bd:49:8a:48:24:37:2f:6d:f0:85:65:e3:34:c7:fb:be:
8b:11:86:69:b8:48:35:b5:17:83:1e:5c:4c:8f:93:cf:da:95:
71:12:09:4f:f0:96:e9:de:a0:d5:4b:e3:d8:70:9c:ce:64:42:
5a:22:64:12:e0:b3:4f:9e:54:9f:eb:76:a3:12:4d:f2:9b:af:
37:ab:75:f4:8a:ea:c5:6b:c2:a0:3d:13:29:84:a1:4d:ff:06:
22:68:89:48:5c:87:61:fa:5d:f0:92:e8:8e:95:68:0a:a8:45:
45:38:30:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:32:40 2025 by rpki-client