Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa
File: 9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa (raw, json)
Hash identifier: hCjgATX9TypwZitGJce7sWrL1o5L8rwJW4gIDYuWc0M=
Subject key identifier: 82:17:8A:9D:60:E3:8F:32:EF:4B:B1:94:21:52:F5:A3:56:78:0D:D6
Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3
Certificate serial: 010D0C9F432858484EDACB6C984A9E43230FCE80
Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 13880
IP address blocks: 64.57.32.0/20 maxlen: 24
216.230.48.0/20 maxlen: 24
2620:110:7000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:cb:6c:98:4a:9e:43:23:0f:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=8f751a3d-7ee9-4ae3-addd-affcb7d3fe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:47:c1:df:23:99:1f:41:0a:0a:b2:da:c1:79:
c8:ae:51:47:9a:49:89:82:35:cb:05:f6:44:98:6f:
1a:ca:10:71:e9:57:3e:f3:f0:1b:a0:ef:9f:a5:b1:
1c:f0:2a:40:56:bf:0f:e4:6f:f6:2e:f9:bd:53:46:
29:77:15:a6:59:d4:c6:73:a4:7c:26:b7:ac:37:f6:
34:cf:8d:ff:49:00:bf:3d:96:9c:8d:fe:d1:cf:b9:
9f:9b:f3:33:2c:e7:d3:f4:0e:c7:82:69:01:de:67:
4e:cc:82:c7:36:a0:ec:33:9f:e0:f9:95:83:ad:50:
81:39:93:1e:dd:7a:f3:f8:39:f9:a6:a8:3b:a5:6e:
ad:60:4b:41:08:45:99:ea:42:79:62:9a:ef:1f:f8:
0b:c2:4a:d6:9d:92:81:df:25:c7:06:f1:39:68:c1:
70:c5:63:6e:2a:7f:81:02:af:61:11:ff:2a:fe:42:
4f:fb:c3:c3:07:e1:cf:61:97:d9:d5:0b:84:e6:21:
27:92:9e:2c:cd:04:ee:9b:e8:47:2e:a5:a3:24:36:
68:b6:75:eb:a3:c0:93:f7:ff:6f:26:fc:d8:06:09:
68:7b:d4:4d:3a:f0:ee:64:85:ea:05:03:30:6d:6e:
14:e5:e0:67:d6:47:90:fb:e4:54:63:9c:7b:dd:22:
48:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:17:8A:9D:60:E3:8F:32:EF:4B:B1:94:21:52:F5:A3:56:78:0D:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl
X509v3 Authority Key Identifier:
keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.57.32.0/20
216.230.48.0/20
IPv6:
2620:110:7000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:33:af:e8:eb:39:23:c3:db:11:0f:41:8d:9e:e5:a9:31:26:
58:d2:d1:1b:4a:2e:ba:27:bd:8a:2f:58:50:a6:dc:56:6a:dd:
ea:c9:4e:11:99:0b:73:12:3d:cd:57:bd:81:b2:93:d7:f1:c0:
4f:6d:98:7f:d4:67:e5:26:f4:dd:b1:e9:0d:15:d7:4b:3d:82:
38:fd:df:21:78:c2:3b:79:27:40:18:16:8b:4e:69:a9:02:93:
73:37:ae:6f:81:63:2e:30:20:ee:6d:d9:1d:57:71:88:eb:7a:
1f:68:6d:66:dd:81:32:00:53:47:03:9d:0d:2e:70:e4:3a:48:
e6:5f:24:3d:ff:47:f3:4e:82:f9:41:0e:be:e7:85:70:9e:61:
14:e8:97:8c:2d:0e:e4:23:93:d6:84:b7:33:ce:63:6b:92:fb:
ae:0e:48:fa:91:ff:7c:7b:0e:02:af:57:96:7e:a2:5c:4f:c8:
27:13:d6:ab:7c:c7:da:52:e6:c6:f3:ff:82:19:3c:93:f6:71:
46:c3:36:ec:90:8a:6c:94:f3:cc:95:24:02:92:2a:e3:49:ed:
a5:f9:b5:64:b3:26:36:cc:e6:90:e5:4d:41:c9:ab:c7:89:cd:
e2:47:8c:c6:00:dc:56:e1:c7:7b:7a:0e:18:be:05:ba:9d:ff:
65:78:96:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:21:55 2025 by rpki-client