Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa
File: 1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa (raw, json)
Hash identifier: hcMiUQvi0jLd7tysNcJGCZXCA6Fo0vSoj8bGMbA/xb0=
Subject key identifier: BA:E8:FA:0F:73:1D:C0:F0:1D:12:CE:75:C7:EE:37:3F:08:2F:25:FE
Certificate issuer: /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial: 010D0C9F432858486695C63CC52DEE4C6C973200
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 6954
IP address blocks: 69.4.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c6:3c:c5:2d:ee:4c:6c:97:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=c9cc3bf7-1e60-4419-af4a-ea86563682c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:60:13:22:97:a0:b4:d1:2b:e5:68:ab:74:
85:9e:94:31:74:c6:7f:06:ec:95:d0:29:94:ad:75:
e6:6e:aa:58:1f:da:04:24:38:11:55:a4:23:c7:46:
ea:bb:51:34:98:85:70:db:b1:f8:f1:62:a4:b5:b0:
95:a3:83:61:d3:59:3a:44:ad:3c:16:57:c7:7a:23:
d4:b3:1b:ba:13:0a:da:c7:2d:2a:7b:8c:a9:12:3c:
a5:5d:18:a0:4c:d9:9f:2a:69:80:9a:c6:35:00:d8:
06:4b:b6:75:01:3b:2f:a6:26:71:a5:16:11:ce:6d:
20:74:cd:ba:3b:3c:bf:64:fb:ca:a6:ee:66:df:d0:
3f:f8:5c:8d:d2:f5:73:8a:dd:d8:c7:4b:37:2c:fb:
92:93:ef:e2:26:aa:97:1b:d6:c3:78:00:4b:84:d3:
bd:0d:a4:8f:39:c5:9c:8a:fc:93:96:f9:4d:35:f1:
e1:63:c8:bc:1f:aa:57:2a:cd:e5:9d:3c:9b:d2:83:
52:f7:1e:de:9d:9d:33:29:1e:b0:e1:46:00:69:e9:
f7:d3:12:a0:12:e3:79:51:f4:1a:f4:c2:b8:b8:aa:
04:8a:74:46:16:c1:3d:a9:46:44:ab:c0:75:84:b9:
19:fc:a9:af:06:2c:1d:49:57:c5:2a:db:25:91:ef:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E8:FA:0F:73:1D:C0:F0:1D:12:CE:75:C7:EE:37:3F:08:2F:25:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
X509v3 Authority Key Identifier:
keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
sbgp-ipAddrBlock: critical
IPv4:
69.4.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:1c:55:18:13:ca:c3:4f:5e:ee:72:7a:3e:64:d4:ba:73:14:
d1:98:f0:e1:9a:92:88:d6:b7:51:38:44:f3:6c:16:d7:a8:e6:
f9:4f:e9:d7:f9:c6:a4:3f:96:bf:c7:02:05:7c:a1:98:a3:77:
ea:80:a8:ac:cd:c2:72:40:76:2c:e2:61:c9:6e:62:3a:12:e0:
c7:0e:50:91:c3:b1:a3:81:73:89:fb:c9:a9:fd:f7:45:a5:8b:
c3:f7:c1:de:99:ec:05:c9:e0:12:9c:b0:7c:a0:b1:c0:1f:f6:
f8:8e:36:95:c8:78:89:44:37:af:f0:75:ad:98:46:a8:e5:01:
c5:0e:27:c1:74:ae:66:f8:19:7a:78:5c:13:34:0d:a9:23:7d:
02:95:5e:4d:eb:30:14:96:cd:7e:0b:f4:98:41:6c:d5:a2:b6:
b6:d8:20:a6:c6:9d:59:0f:20:df:da:aa:55:02:3c:6b:c5:66:
14:31:31:c0:b5:b7:91:68:24:c1:7e:07:32:3c:36:44:1b:83:
2d:c4:a0:33:74:8f:0b:8e:af:8e:9b:37:9c:47:94:47:1d:e4:
4c:26:ff:e5:dd:a0:59:4c:fd:60:af:d4:b8:c4:b9:98:fe:a7:
a3:59:f5:bd:39:e8:eb:db:1d:ee:9a:e6:ed:9e:cc:c7:8f:58:
d7:69:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:13:38 2025 by rpki-client