Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa
File: 8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa (raw, json)
Hash identifier: vqOcu+pSPFez6Ffcz0btbk8gMz/4nCVkCoJJW15S0ag=
Subject key identifier: 79:03:42:77:A3:D1:54:BA:BF:DD:74:78:E6:10:36:30:9A:23:DD:BB
Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial: 010D0C9F432858486695C169488A322594757940
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 3695
IP address blocks: 70.36.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c1:69:48:8a:32:25:94:75:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=3d3a582e-1311-4aa1-9ea4-c66a285ef2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:a7:13:9b:0d:51:3b:76:38:d6:a0:d7:5e:
4b:7e:23:f3:2b:df:bf:aa:e6:2a:6a:da:9f:a8:00:
54:7d:f8:71:1a:0a:2f:e6:b3:f1:a5:53:7e:95:2e:
74:30:c5:f2:c8:c5:f3:63:f8:75:57:3d:65:94:dc:
4a:ff:38:14:9d:a9:54:d4:00:b3:6a:61:aa:df:84:
b9:bc:b4:97:e8:c3:c1:ec:48:61:7c:24:a1:05:cb:
67:9a:a1:bd:a5:8f:f4:4c:19:a1:1c:42:68:17:71:
59:d3:f1:bb:4e:f8:a2:3f:c4:1c:59:2c:fb:05:12:
46:87:76:67:65:64:c2:df:91:d0:39:b6:6a:73:0a:
39:8b:22:66:81:5c:13:45:9e:c7:a5:d9:7f:8f:db:
cd:01:c0:46:f6:68:2c:2d:83:28:c8:e0:c4:d4:08:
b9:c1:b6:ec:58:0e:b7:d7:34:aa:c9:e0:91:db:99:
d4:95:14:1a:bf:f7:4e:58:de:57:5c:8b:70:61:7a:
3d:ea:c0:65:b0:3b:89:38:b6:5d:8f:50:df:e6:39:
9f:38:f3:97:0e:f2:fa:d3:d9:64:9d:31:b4:eb:2c:
05:fe:c1:ab:b2:c0:aa:28:ae:60:86:4c:e0:58:db:
e9:b2:2f:00:07:6b:68:ef:55:2e:e2:88:e9:dd:82:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:03:42:77:A3:D1:54:BA:BF:DD:74:78:E6:10:36:30:9A:23:DD:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
X509v3 Authority Key Identifier:
keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
sbgp-ipAddrBlock: critical
IPv4:
70.36.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:82:38:6f:15:92:e4:9a:4f:e9:d2:b0:a9:54:d0:a6:38:a5:
6c:70:0c:87:cb:6e:3b:f1:b2:5e:fa:0a:7a:4f:d6:2d:b3:46:
6f:e9:69:df:3a:ec:10:49:83:96:bf:7c:41:9a:79:df:f3:f9:
c8:b5:c5:3e:78:8d:3e:82:9a:09:00:c7:c0:80:b3:d2:3e:48:
dc:7a:de:98:f2:e0:2d:56:d7:d8:88:22:94:d1:89:5e:9d:42:
74:d9:d6:2d:88:fb:e5:6b:fd:ca:7b:34:f3:f7:4b:10:55:14:
c2:4a:d3:b9:b7:ad:e3:7b:30:82:ba:0b:ad:48:bd:1b:00:3d:
af:0d:26:aa:98:8b:b5:74:bc:43:14:59:c8:b7:70:93:06:f3:
26:e8:f8:8f:6e:85:98:6c:97:90:89:8b:96:77:d3:6b:c7:0b:
2f:67:a5:95:b8:d6:4a:e8:aa:b6:d3:6e:06:60:12:01:2c:47:
17:0a:16:19:47:86:e9:51:fb:c6:ee:0e:ee:a2:bd:df:5f:7e:
93:12:ee:c5:43:32:41:ed:a7:29:2e:5b:60:2c:a6:4f:67:3c:
6f:31:22:49:75:70:4c:0d:c8:35:41:5b:c7:f1:ab:24:6c:12:
9a:92:e7:de:37:d6:0f:51:d3:d9:62:2f:c3:32:9c:6e:34:2e:
61:c8:46:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:59:10 2025 by rpki-client