Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa
File: f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa (raw, json)
Hash identifier: WSDp3bEFGYJghvrCpoJnWHvurqTGvAPYUVOO9VUj0ss=
Subject key identifier: FB:FD:94:34:3A:C0:9E:6A:5C:EB:19:BB:0D:E2:2F:B0:97:CA:FA:6C
Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2
Certificate serial: 010D0C9F4328584819CFD5202F90A9A32ED0A140
Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 395035
IP address blocks: 64.239.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d5:20:2f:90:a9:a3:2e:d0:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=3eb03e9f-2aab-4c94-8535-d3ff4ff5bba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:2d:f5:f6:8a:c9:e3:c1:76:ec:43:3d:b6:
0f:a6:f7:ed:e8:37:6b:a5:1b:76:c7:be:28:7f:6a:
7b:91:c0:a2:98:99:b9:52:16:c9:0a:ef:d1:b6:81:
36:4c:bb:a3:83:32:fb:df:a7:1c:a8:71:6e:f6:37:
54:cb:0f:30:80:4f:02:b8:5a:0d:b7:a4:9c:82:5b:
df:87:3b:80:9f:23:4e:cb:d4:4c:f9:a2:74:de:f0:
d9:0e:d4:fb:89:70:7d:f4:ec:eb:f8:29:21:01:92:
25:e2:05:81:63:8c:16:15:67:23:d7:c1:b0:5d:c0:
25:6a:bb:79:9e:6a:86:15:49:f6:5a:2f:12:a6:9d:
3d:c8:61:90:d8:d3:be:92:0b:e3:b0:bf:b7:d0:6d:
dd:ef:43:12:23:10:92:93:f6:dc:1e:d5:31:5b:7b:
01:13:74:cc:74:dc:19:a8:15:61:69:8e:b9:9e:71:
27:45:04:a8:9a:54:37:d2:aa:e0:6a:fe:78:dd:01:
6c:20:a9:97:26:60:fa:54:14:74:61:63:c4:a4:f6:
57:84:30:75:d3:9e:a4:5a:93:5e:27:49:14:75:6e:
90:77:1c:93:b2:61:2b:9b:5d:49:0f:d5:9c:f8:c2:
80:f2:f7:a5:b1:f8:1b:3f:6e:b6:e9:d2:03:6f:47:
ad:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:94:34:3A:C0:9E:6A:5C:EB:19:BB:0D:E2:2F:B0:97:CA:FA:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl
X509v3 Authority Key Identifier:
keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.239.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:04:10:6a:83:4f:dd:3b:f6:d4:3e:dc:a9:10:19:26:f4:9f:
50:d1:70:0d:d4:a7:da:41:4c:d1:80:f9:a9:24:ea:4f:6e:c8:
fb:01:3f:d2:2b:20:bb:08:86:d6:ec:97:4a:e3:96:85:28:2d:
94:86:75:a8:72:88:f8:b6:45:85:0c:92:19:93:af:96:b6:46:
ab:dd:47:5c:84:ec:9d:d8:48:48:91:58:38:4a:65:ac:c3:4e:
73:f7:4d:b6:2d:c0:c8:75:ac:7e:f3:c2:6d:84:ec:98:97:4c:
a6:73:8e:bf:73:a7:25:ea:90:ba:52:e5:ee:5c:9c:76:12:13:
2e:ae:29:a2:c4:f7:3e:73:1f:0e:69:07:d6:d5:f4:aa:cc:58:
bc:80:f3:01:72:e0:79:ac:98:bf:15:41:b6:4f:e9:b6:2b:3f:
18:0d:82:40:08:7f:c8:94:d4:8c:2f:7d:74:28:87:8d:e0:13:
74:d5:a9:52:6d:95:28:23:90:51:8b:74:c4:16:46:13:27:a9:
a8:97:7f:c0:8f:6f:02:c1:00:3c:34:05:3c:67:e5:46:b8:7f:
5b:53:88:4a:76:d8:ac:ca:f5:15:07:2e:ec:bb:f1:33:e6:30:
e3:9d:2b:ce:ca:7c:16:5b:e2:2c:68:46:bb:03:f3:69:18:07:
66:ab:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:50:19 2025 by rpki-client