Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d22e9b9f-7ff2-31f4-aba9-be93d218eace.roa
File: d22e9b9f-7ff2-31f4-aba9-be93d218eace.roa (raw, json)
Hash identifier: Z3bRtJlHQ978nBhgmyomyMOISAOg1a8up8tMQdyx7hM=
Subject key identifier: 5B:49:B0:9A:60:B4:A6:B4:38:86:90:E7:98:8A:F3:88:9D:3E:7F:4D
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858487E0238146E2BC31007832280
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d22e9b9f-7ff2-31f4-aba9-be93d218eace.roa
Signing time: Thu 09 Jan 2025 23:23:13 +0000
ROA not before: Thu 09 Jan 2025 23:23:13 +0000
ROA not after: Wed 09 Apr 2025 22:23:13 +0000
asID: 22652
IP address blocks: 64.187.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:02:38:14:6e:2b:c3:10:07:83:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 9 23:23:13 2025 GMT
Not After : Apr 9 22:23:13 2025 GMT
Subject: CN=684fbc47-de72-40b7-852f-d2dd86a440b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:92:b3:80:db:bf:a1:86:7f:80:c2:f7:23:
8f:31:12:9f:08:aa:2c:82:d1:42:7d:10:da:d0:03:
92:0e:45:6a:60:c9:e9:b2:d1:1c:29:d0:da:69:54:
96:97:65:12:dc:22:63:9a:d1:70:65:14:69:d4:e7:
99:5a:5b:d2:af:59:0f:66:39:a4:4e:3a:c0:38:cb:
7d:ae:f7:e2:c4:ca:61:72:7b:5a:eb:1f:30:a6:c1:
21:7d:5b:48:28:8d:c4:af:c2:48:03:4e:e8:ab:ed:
f9:ad:8f:ef:ef:82:93:3a:be:0b:55:00:ec:21:ae:
b3:bb:ec:55:96:5a:52:bc:0e:4d:d4:5f:f8:81:2d:
c0:08:29:a8:2a:bc:60:b4:3e:7d:09:9e:1b:92:1c:
ed:93:29:db:b8:78:69:12:1e:19:cf:66:56:ad:95:
26:92:29:b5:0f:76:af:da:15:5e:04:97:65:32:11:
87:18:f2:f9:88:cf:23:42:fd:09:31:66:c6:b9:27:
44:05:0b:1d:6f:ae:bc:16:83:86:8a:f9:48:d8:55:
a6:98:03:25:82:bc:c6:41:e7:cc:15:2c:ee:97:48:
b0:cd:de:14:ef:04:16:8c:dd:97:a4:41:a1:7a:b8:
dc:48:ed:95:d5:8c:1d:13:c9:8f:68:57:d7:53:43:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:B0:9A:60:B4:A6:B4:38:86:90:E7:98:8A:F3:88:9D:3E:7F:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d22e9b9f-7ff2-31f4-aba9-be93d218eace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
64.187.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:be:d2:b2:bb:03:02:a2:4e:fd:b7:bc:10:36:22:cf:2c:b1:
fe:e1:26:9d:5a:be:83:c1:6a:53:e4:c3:63:e1:d5:d5:39:17:
26:d3:ee:29:3d:80:3b:03:3e:0d:05:a9:a1:10:43:9a:f0:b2:
41:68:ed:24:cc:bf:bb:4f:4a:c6:fe:10:a4:50:e4:57:1e:10:
79:70:cf:ff:bb:4e:f0:0e:fe:41:bd:a8:3e:1e:6d:28:83:45:
07:6a:75:7b:00:4f:aa:44:b0:ce:e3:a7:91:8c:d2:82:bd:d7:
b3:05:aa:fc:2d:b9:68:18:2f:9d:fb:eb:67:c8:45:69:86:fa:
c8:5f:a7:3e:08:7c:eb:fb:ed:b5:4c:02:dc:1e:54:78:70:d2:
25:f5:53:91:2e:b3:17:cc:ab:31:31:17:01:38:61:9c:95:29:
e9:e4:28:99:e2:7f:fd:1c:41:99:58:61:0f:a0:f4:a7:4b:8e:
d9:5b:62:a4:bd:86:a5:9c:a1:a5:12:b1:3b:ac:35:1f:ce:b1:
2c:21:fe:23:9b:5b:26:ca:f9:63:b2:3c:73:a0:95:9e:b1:7c:
58:cb:70:c1:c5:0e:88:0b:3f:dc:c7:1a:1e:ab:08:63:88:47:
90:1a:a5:87:2d:80:1b:33:31:5b:ac:96:2c:42:a6:c1:4f:4a:
94:5f:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:58:47 2025 by rpki-client