Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa
File: 9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa (raw, json)
Hash identifier: JeAFONWuAfrmbUUzFXG3WOtVITUR2kZh9x896RPK6j8=
Subject key identifier: A2:96:AC:56:68:6D:FE:24:7C:3A:14:B3:DB:0F:40:93:CA:0E:53:39
Certificate issuer: /CN=6a38b089-4bb1-4c65-837b-853a9a3398e1
Certificate serial: 010D0C9F43285848388559F1F55EE21534CB3C40
Authority key identifier: 61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 5650
IP address blocks: 64.49.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:59:f1:f5:5e:e2:15:34:cb:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a38b089-4bb1-4c65-837b-853a9a3398e1
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=eb8dfd49-1e92-4325-83dc-a8f695c464e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:7d:43:d9:d8:19:3f:76:e8:7f:93:1b:81:
54:96:d0:a0:0e:82:cd:39:da:a0:a0:27:dd:f0:ab:
d8:04:5f:3c:73:ad:f8:10:c0:d1:df:40:e7:e3:be:
57:77:1e:5c:a1:cb:82:24:f9:40:0d:8c:ec:7a:11:
4f:0b:65:cf:32:a2:29:eb:e5:7b:c1:19:5a:60:42:
96:0a:e8:d6:c8:5d:10:bf:43:72:c1:c0:df:a8:0f:
26:f1:8e:d0:fa:53:2b:65:46:8a:31:a2:d8:50:9b:
a3:1c:d4:6c:ed:a4:49:67:8e:d6:e3:63:0a:25:e6:
90:a7:da:09:23:e9:d8:8e:f9:d7:24:06:c5:34:e3:
6b:85:df:df:25:69:9d:7c:77:a1:df:d5:c0:b7:7a:
8c:dc:4f:e2:3d:eb:df:d9:67:c5:78:dc:e9:4a:82:
32:85:52:cb:86:f9:4c:38:08:ff:3f:62:5c:eb:b8:
3a:cc:a2:55:fe:a3:cf:26:f1:ea:da:8f:eb:5e:eb:
03:34:66:58:f5:da:40:e8:a4:10:cf:3b:2d:7d:06:
9b:ac:1f:b4:3d:b1:e4:73:08:4e:58:84:9b:3f:08:
36:dd:e5:44:a0:9e:99:d5:da:96:ca:91:ed:3f:4d:
a6:b8:81:a8:4c:6e:d0:9f:98:a8:25:57:57:6f:56:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:96:AC:56:68:6D:FE:24:7C:3A:14:B3:DB:0F:40:93:CA:0E:53:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl
X509v3 Authority Key Identifier:
keyid:61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer
sbgp-ipAddrBlock: critical
IPv4:
64.49.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:3b:9e:51:9e:bd:2f:60:c8:d9:13:09:89:58:1d:69:d9:c4:
83:fa:c4:62:ee:c7:51:ef:e8:86:9b:cc:b1:95:62:5f:2d:c7:
d5:73:3a:f9:55:02:31:53:cd:91:94:47:a7:99:2e:8a:30:56:
f6:d5:7e:6e:19:9a:b0:d7:b7:d9:ce:07:68:ef:cb:a2:3d:c2:
d7:05:d1:4a:70:c2:0e:5e:5e:94:8b:42:77:2f:13:12:e1:b7:
76:1a:96:75:a8:d9:7c:b3:45:06:1f:92:80:4e:83:26:df:fc:
48:10:21:ca:cf:24:53:07:83:c5:3f:6e:74:e0:91:30:13:7e:
48:28:ef:66:2a:9e:b2:e5:e6:72:ce:f2:c3:2d:e4:70:6d:5f:
ec:0c:eb:bc:60:85:fa:46:63:47:bf:0e:a1:1d:cd:48:e6:53:
81:94:6f:08:e7:07:1f:70:8d:6c:06:78:69:94:6b:af:78:25:
7b:d9:c1:08:93:3f:1e:65:91:77:b6:6f:77:9c:7c:63:f7:ec:
61:35:3c:d0:4f:86:51:a2:50:ae:7a:99:0f:55:cb:2a:ad:37:
dc:8c:51:0c:9e:d4:8f:3a:1a:8f:23:16:31:ae:e4:35:8a:07:
06:03:64:f8:3c:bc:15:0f:52:2f:34:d3:d2:50:3e:f2:3c:f3:
ac:99:5d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:02 2025 by rpki-client