Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/a8c2ee2b-10da-3539-8d2b-ababe318d7d9.roa
File: a8c2ee2b-10da-3539-8d2b-ababe318d7d9.roa (raw, json)
Hash identifier: nHpAs8tj4ahfNmzZe488W9UTTZKUo/8ulxRxYfSyk/o=
Subject key identifier: 18:85:D5:8A:57:13:0E:42:41:26:37:C8:70:D6:52:A8:64:4F:2C:F5
Certificate issuer: /CN=692aac29-6d3b-4bdf-9238-da449246d5ab
Certificate serial: 010D0C9F43285848388560C27773D176DE46A680
Authority key identifier: EA:56:10:32:5F:67:0D:6B:D4:13:D8:4E:62:59:26:B5:BF:49:88:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/a8c2ee2b-10da-3539-8d2b-ababe318d7d9.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 5650
IP address blocks: 64.40.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:60:c2:77:73:d1:76:de:46:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692aac29-6d3b-4bdf-9238-da449246d5ab
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=9c193fa5-1391-4707-8e0b-100a825a1e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:ee:da:3d:bb:93:6e:cf:06:6d:18:9c:87:
62:38:fe:9f:e9:21:33:0c:36:75:7b:9f:8b:98:a1:
26:0b:08:3d:b4:62:d1:1f:33:1f:c1:97:19:bc:6b:
66:d6:bd:ba:34:5c:9a:e8:1a:24:c1:9e:f2:2e:30:
de:f3:c8:f4:ff:f1:05:28:45:4f:4c:2c:a9:16:ac:
aa:11:00:01:f9:22:df:6e:3d:63:5a:cf:e1:3a:b3:
61:53:45:e0:24:cc:b7:e0:66:36:b2:a6:18:eb:39:
23:73:75:3e:8b:e7:a7:f5:c9:e0:e3:65:77:8c:5e:
f2:b9:a6:bc:a8:8d:8a:6d:e5:09:62:89:ac:43:c4:
97:cb:56:93:3a:e5:4d:ca:da:0d:f6:1e:42:9a:be:
48:a0:c8:3b:38:43:52:f9:98:84:70:ce:d2:ed:18:
c9:03:95:d9:80:9b:55:df:da:8f:05:ef:a2:9b:00:
c4:c7:a7:35:99:5f:02:41:2a:c5:75:09:95:d4:b3:
68:16:25:48:ec:54:b9:18:5d:cf:af:ca:7f:ac:e1:
49:0e:cf:0d:0c:d1:a0:24:2b:0a:a3:dc:5e:78:8a:
92:0a:b9:0f:a5:03:58:ca:99:6c:4b:3f:c0:61:57:
fc:4c:13:c6:80:ee:40:45:93:8c:d5:e0:37:dc:d2:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:85:D5:8A:57:13:0E:42:41:26:37:C8:70:D6:52:A8:64:4F:2C:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/a8c2ee2b-10da-3539-8d2b-ababe318d7d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.crl
X509v3 Authority Key Identifier:
keyid:EA:56:10:32:5F:67:0D:6B:D4:13:D8:4E:62:59:26:B5:BF:49:88:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab.cer
sbgp-ipAddrBlock: critical
IPv4:
64.40.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:24:cf:66:2a:b7:09:38:d9:6b:9e:e7:50:73:e6:6f:58:2e:
0a:57:5c:54:a9:9c:d2:ae:04:de:30:f3:b6:1d:2b:a7:e3:53:
eb:6d:88:4e:df:ac:4b:8c:3b:92:a9:d5:ba:1b:bd:42:3d:f8:
2b:bf:0f:6a:bb:3a:6b:40:a0:90:ad:bb:e9:86:e9:c4:54:cc:
70:a0:2f:49:91:45:cc:2f:87:45:20:b7:f3:3f:7e:be:0d:d8:
d2:02:9f:a3:a6:19:c0:2c:41:79:31:b9:81:3c:33:04:81:4d:
47:1a:f9:7e:73:c7:b3:eb:40:65:5c:60:b6:1b:2d:09:50:30:
f2:17:a3:cc:ba:fd:f8:ea:5e:86:24:5f:da:41:c3:48:5d:3e:
af:2c:04:d3:8f:fb:31:fb:3b:b1:42:e8:6d:f3:bd:14:c9:1e:
44:81:37:f5:b6:13:40:ad:1b:c0:ed:5d:3d:b2:02:bc:be:b5:
73:37:b3:35:80:54:0c:27:df:fd:e9:af:65:36:f7:86:31:06:
12:e2:0f:0a:d4:35:8b:e8:90:d0:8a:95:45:e9:12:08:75:6e:
6f:71:e1:33:3b:18:12:6f:51:10:a5:53:8d:7c:22:28:bb:37:
49:21:a6:c0:15:bb:14:7d:bb:9d:3f:0e:c4:74:3c:ed:2d:a5:
e1:ba:ee:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:00:29 2025 by rpki-client