Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/d0ffdff8-04ee-34cc-b74f-e8fe014cefcc.roa
File: d0ffdff8-04ee-34cc-b74f-e8fe014cefcc.roa (raw, json)
Hash identifier: vdvDf9ySITH8QmAQJ8wPk/WvFku9J+FyMdsjHWDrPf4=
Subject key identifier: A1:8B:E5:EF:5D:19:48:14:E0:A7:F9:10:D3:35:A2:B0:32:EC:E5:B1
Certificate issuer: /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial: 010D0C9F4328584894A5E40C35135E3B4FD5F400
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/d0ffdff8-04ee-34cc-b74f-e8fe014cefcc.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 395512
IP address blocks: 64.40.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:e4:0c:35:13:5e:3b:4f:d5:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=bbc3260d-c4e5-4792-94bd-e9fb9f489b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:59:ff:d0:b8:61:eb:b2:92:b2:a0:3f:7f:a9:
84:88:c0:08:95:a2:68:f6:a3:0c:ed:0d:33:56:4b:
87:7e:b4:37:a3:88:0d:59:6c:e5:b5:05:6a:74:60:
0d:90:a1:15:3d:83:f8:48:79:ce:10:1a:20:77:8b:
aa:30:58:57:28:28:b8:fa:55:67:70:98:51:c6:2f:
58:a5:37:d6:c8:4f:32:46:89:11:1c:35:1f:c2:aa:
74:c8:c4:ae:da:6b:38:db:a4:c3:da:47:de:a0:39:
cd:7e:69:8a:f7:f1:0c:44:98:41:bd:e6:90:56:58:
30:58:56:c0:c0:9d:36:03:a3:26:5a:85:f6:20:73:
82:00:c4:fb:38:9d:80:08:69:d4:5b:13:a6:78:eb:
bb:c3:18:e7:73:f7:8a:a2:8c:00:d5:22:6a:05:dc:
08:82:61:28:63:5c:9f:75:0d:14:38:0b:10:36:e9:
52:4e:5f:c8:da:cf:41:43:ce:c0:9e:f5:69:2a:74:
ca:00:8b:8e:1a:00:10:29:b3:ad:25:cf:58:a6:ed:
f8:10:d8:3b:8a:1b:e3:aa:fd:29:6d:15:2d:bc:b8:
06:49:55:fe:6a:4f:c0:66:7c:4f:5e:bc:22:bd:a9:
e7:28:d8:e8:eb:49:39:58:55:7f:5e:14:59:6d:c1:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8B:E5:EF:5D:19:48:14:E0:A7:F9:10:D3:35:A2:B0:32:EC:E5:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/d0ffdff8-04ee-34cc-b74f-e8fe014cefcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
X509v3 Authority Key Identifier:
keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.40.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:38:5a:b3:0e:f0:02:a1:f4:51:bc:4b:3e:9a:dd:8f:8d:35:
b6:0b:bc:88:f3:20:c5:4e:44:e6:69:9e:3f:58:ae:be:1e:c5:
ce:05:b1:a1:57:68:38:8f:2d:9b:05:bb:31:be:af:65:51:3e:
50:92:e3:62:eb:04:1d:95:dc:ec:3d:16:7b:6e:40:9a:c6:b7:
93:eb:96:ab:18:18:3c:b7:2a:a6:a2:2e:02:ed:65:95:17:76:
39:19:fd:74:20:1d:03:fe:4b:e1:3e:10:6a:19:60:c1:89:3d:
eb:f7:74:33:d6:0a:c3:b9:72:c5:40:72:8c:79:12:d0:65:47:
e9:9e:29:58:57:2c:9a:bf:b9:c2:5a:5f:39:9e:ef:5c:10:24:
a8:6c:48:36:de:2d:53:2e:6c:dd:f6:08:87:5a:1b:a2:18:96:
09:f8:0e:54:3c:5b:3b:a6:99:cd:1c:51:9a:2d:a4:b4:17:67:
8d:09:43:0a:2a:24:55:d2:09:90:7e:de:63:27:30:6e:53:71:
12:f0:89:bc:f6:e0:8c:61:57:ea:84:bb:73:0d:76:79:9a:8c:
1e:d8:fd:d5:97:75:af:7b:59:e9:bf:56:50:3b:cb:c1:a8:d5:
ec:61:d4:de:f9:7a:ed:51:d3:40:82:bd:34:75:66:f0:ad:2e:
ff:f4:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:07:40 2025 by rpki-client