Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa
File: 7942817f-a176-37e5-8911-6f29c62a1537.roa (raw, json)
Hash identifier: R3mk9Nc/70CTVeZ7Rqefy+fHJUNLgg6EFm9cC4QpnS8=
Subject key identifier: FE:59:F4:37:61:7E:BA:85:B7:E9:60:18:F6:CE:CF:A6:DB:DE:20:A3
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F432858486960682B7EF2224A89AE9080
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 393885
IP address blocks: 64.71.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:68:2b:7e:f2:22:4a:89:ae:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=90b87dfd-edcd-49ea-add8-156bb462e6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:19:af:ab:a7:96:15:d6:85:7a:5b:ef:bd:
fc:2e:2d:06:40:6d:ec:9c:a3:7f:f0:1d:0e:2b:34:
fc:a0:ba:31:66:28:76:2f:f0:87:0b:a9:0a:96:67:
2e:ed:1f:76:b7:d5:a6:49:55:47:2a:f3:e8:48:6c:
67:50:af:c9:1a:e6:74:06:95:f3:76:b8:4b:6f:4e:
e2:00:7b:51:35:d8:66:58:d9:82:4c:a1:ec:e7:01:
08:7f:cd:40:3a:33:87:76:1b:42:6a:f2:15:99:5f:
2c:27:f2:d0:4b:00:0c:4f:c4:b9:3d:e7:21:c4:0f:
f9:fd:32:28:e2:dc:ad:0a:ea:36:97:01:a1:e2:65:
b9:ad:32:a4:32:c2:3c:95:f7:a2:4c:d4:21:64:03:
3c:07:77:52:a0:08:f8:35:a5:81:81:32:d5:78:77:
00:73:5b:2f:39:c6:cf:32:78:61:b0:d2:52:b4:3d:
85:2e:0b:2d:34:3f:26:62:37:17:54:1f:10:55:a9:
2b:76:f8:6d:9f:8a:a8:db:0e:33:01:12:f3:ee:e7:
51:f1:e4:59:5e:a8:5f:25:11:84:a5:93:9c:18:6a:
13:7e:3a:c2:8c:d7:12:39:71:d0:45:f3:af:ee:6d:
20:df:2e:6f:e0:47:3a:f4:e9:a9:be:3d:a9:97:1b:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:59:F4:37:61:7E:BA:85:B7:E9:60:18:F6:CE:CF:A6:DB:DE:20:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:b6:9d:db:3d:58:b7:51:3a:00:fc:41:62:ae:5c:08:5f:90:
c0:9a:80:9a:be:0f:36:ae:8b:ff:69:c6:93:98:88:85:cd:4a:
08:b6:4b:36:07:64:0f:28:53:09:c9:5d:6a:56:83:ee:57:73:
a6:72:e8:1f:de:7a:38:0e:34:24:62:7c:05:df:89:39:86:2a:
f0:4f:7f:46:74:ef:25:9e:81:f2:a6:13:cc:c0:f2:80:3e:ca:
85:53:41:62:d6:b5:67:87:a7:a2:d4:9d:d6:86:96:55:1d:ed:
02:c7:47:d9:f6:44:38:fd:20:8a:11:e5:01:78:cd:a9:0b:7a:
af:16:dc:75:a8:be:01:2d:8d:5b:ae:41:1f:1c:73:c6:24:89:
9e:8c:ae:77:d9:c8:4d:9b:73:54:24:8b:b8:f5:a8:e3:f9:40:
f0:cf:72:1f:c1:8d:85:25:7a:29:f1:76:d5:ec:c7:31:f7:67:
33:af:f3:62:4f:38:70:6c:9b:ed:71:16:36:c8:34:34:8a:c9:
45:5d:06:81:1d:10:ce:22:f2:55:c1:0e:43:ce:5d:de:42:9b:
ec:fd:e7:08:23:a3:9a:3d:33:2e:bc:9c:75:d9:88:0f:52:fd:
98:ff:32:4e:83:b5:34:87:7a:86:79:a1:f6:de:5a:5c:a6:95:
f6:5f:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:22:31 2025 by rpki-client