Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa
File: d98b870b-d634-3a37-82c3-af55f7ef3032.roa (raw, json)
Hash identifier: /bM/KMzw07iOzjU7Zc2dVc9J7JkMsOMlAszLIuUxuEE=
Subject key identifier: 11:0A:8C:B3:BD:F6:CD:AF:69:8C:20:52:E2:00:C5:7E:DF:9D:F0:FD
Certificate issuer: /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial: 010D0C9F432858487CEB3519E0C63A871C24D380
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 64.95.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:35:19:e0:c6:3a:87:1c:24:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=99c0c4fc-b858-4c89-97df-88d6ee1436f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:70:08:88:01:99:56:a8:60:1c:10:cb:61:
6d:1e:99:de:07:4d:e6:a8:35:9d:22:8a:01:d9:ad:
11:94:e8:01:8a:80:18:d4:69:61:a8:31:4e:2d:8f:
d6:16:39:5f:f3:27:85:f7:0d:f0:8a:f4:a8:58:2c:
85:ef:75:13:6f:fd:cf:cf:da:e7:c4:77:84:fb:41:
db:54:58:6f:06:04:00:56:c9:5b:7a:50:16:6c:53:
63:f6:f2:f3:26:c2:f1:16:a1:5f:c3:a7:6d:e6:8a:
cb:a7:2f:0a:36:d1:83:4a:bf:14:aa:ee:a3:b0:e2:
44:cd:28:95:bd:8e:2d:0d:fa:6b:8e:cc:cc:86:1c:
9d:ed:ab:f2:0b:df:90:22:b5:01:2d:cb:92:83:6e:
f9:84:6b:25:5a:95:b9:a2:d2:47:2d:ae:2e:e9:1a:
3d:80:29:47:79:cf:41:05:68:cc:7d:e9:08:04:48:
29:85:22:21:be:5e:d5:b6:01:16:2b:8b:8d:cb:4f:
38:2a:ca:b9:42:61:64:22:43:3f:d9:64:da:ba:9b:
60:d1:e5:6f:2f:02:bd:38:13:1a:ba:2f:57:8f:53:
b6:52:15:9e:f1:14:bb:cd:0c:d6:3d:e2:25:72:d2:
c9:7d:b0:8c:50:80:0b:5e:f6:57:99:15:6e:9e:00:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0A:8C:B3:BD:F6:CD:AF:69:8C:20:52:E2:00:C5:7E:DF:9D:F0:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d98b870b-d634-3a37-82c3-af55f7ef3032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
X509v3 Authority Key Identifier:
keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
sbgp-ipAddrBlock: critical
IPv4:
64.95.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:7e:2f:62:e7:e7:de:46:86:1d:bc:29:59:8a:2c:de:c5:b9:
63:b5:24:31:70:02:06:3d:93:b7:59:60:9d:56:0c:ce:50:21:
b3:6c:f5:07:50:1a:da:71:81:a4:6e:12:5c:e6:05:d6:d9:2b:
a6:fb:2f:68:36:0c:51:ab:b6:6d:ba:a4:d7:1d:30:13:05:3f:
ec:30:9a:6a:8a:86:41:0b:68:0b:11:3d:19:86:c1:40:d2:62:
2b:f8:f3:2e:03:ca:ce:9a:7b:ec:72:fd:0b:e1:f0:3f:42:c0:
00:d4:8a:ed:f0:a2:1b:99:9c:e6:32:27:c0:38:d6:9f:08:46:
34:b5:e6:82:73:19:71:5d:4e:bb:81:27:4a:68:da:93:b8:08:
af:85:6f:99:2f:11:d9:af:a4:82:e4:8e:8b:7b:4e:88:e7:a2:
48:60:4d:51:7f:21:db:b7:3d:3e:f3:a6:10:73:93:55:97:e6:
c7:d2:42:5e:60:49:6d:e5:6b:e7:6c:8d:cc:01:3c:70:09:2b:
af:d9:62:07:d5:52:1e:23:6b:50:9d:79:7b:10:3f:37:5d:0b:
d0:23:10:82:fb:66:be:59:43:0b:35:c2:a0:33:d7:e8:4c:57:
65:fa:eb:0f:25:33:5e:9b:b2:52:1a:ef:f6:0f:59:fb:51:fd:
c7:6d:26:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:08 2025 by rpki-client