Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/9739ae72-b6a3-376c-b189-0b1a00079f84.roa
File: 9739ae72-b6a3-376c-b189-0b1a00079f84.roa (raw, json)
Hash identifier: gStFwMtm+3lbCLGJ2AFz0zp1AqeOM+Og89lfpTeKGR0=
Subject key identifier: CD:14:D6:89:C3:BF:1E:C9:67:95:00:B6:57:D9:14:44:23:EE:D6:B7
Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial: 010D0C9F4328584869606C12904549ADB25E5600
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/9739ae72-b6a3-376c-b189-0b1a00079f84.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 7018
IP address blocks: 65.181.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6c:12:90:45:49:ad:b2:5e:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=dbbff247-b56f-48da-8045-3c6208739a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:60:9a:b1:4e:9d:da:8e:84:2f:3e:5d:fc:
9e:5a:12:39:04:f1:f8:10:ce:2a:77:f7:75:60:75:
ff:1f:3e:2c:a8:48:a5:a8:1f:2a:a5:17:91:00:76:
7f:bb:65:96:ae:c8:c3:90:09:20:a7:14:23:68:8e:
ed:6b:af:51:bf:71:1f:89:f2:dc:c3:fe:4a:c8:64:
1b:e1:45:d0:8d:11:c7:a3:4c:46:6c:c7:ad:ce:f0:
cc:81:48:98:81:06:c3:e9:cc:89:03:3b:2e:1a:dd:
c1:8d:77:ab:2b:64:fb:92:66:ed:8e:9a:6f:48:07:
a2:9d:38:78:15:66:f5:9f:3d:cb:bb:92:dc:10:bd:
c3:68:43:89:73:e5:43:b5:34:eb:26:a5:11:c2:67:
38:44:c7:26:6f:b3:60:23:5b:dc:12:93:f9:58:12:
18:60:e5:fd:71:8d:29:13:66:f3:75:13:48:b7:fb:
81:1f:ac:51:e7:99:c1:69:8f:02:91:d8:e5:be:bd:
25:df:a8:5c:0e:e9:34:01:a3:21:4f:a1:77:b7:6d:
3e:52:c6:8c:06:b3:aa:0c:ca:3c:e3:60:62:0d:b1:
e2:a6:90:c2:b6:29:fc:fc:df:51:49:84:24:54:9d:
aa:2b:cf:d9:54:b8:01:39:b4:99:7f:ed:a4:42:73:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:D6:89:C3:BF:1E:C9:67:95:00:B6:57:D9:14:44:23:EE:D6:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/9739ae72-b6a3-376c-b189-0b1a00079f84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl
X509v3 Authority Key Identifier:
keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
sbgp-ipAddrBlock: critical
IPv4:
65.181.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:38:d5:3a:aa:d5:24:8f:d8:9b:98:0a:39:b6:d6:55:bf:41:
2e:3f:69:33:8a:ad:c0:1c:72:56:20:69:1a:19:8b:20:4d:4d:
fc:cd:9b:3c:ab:54:c2:6e:d9:35:08:d2:d0:4c:cd:6e:1a:15:
10:3f:a6:ce:b0:fc:aa:a7:8c:f6:bf:16:6d:57:8a:1d:7d:67:
96:5b:76:ce:72:9f:bd:25:a8:5a:94:25:3f:fb:78:04:85:47:
66:fd:cc:95:67:d9:32:86:57:e0:cf:05:ff:72:28:d2:c8:f4:
64:97:9c:b1:bb:1e:b9:58:11:53:b6:1e:39:dc:cc:28:e0:41:
f2:c5:e3:e9:df:ac:83:66:68:d7:2a:78:61:de:fc:6f:61:3c:
02:ba:eb:35:da:7d:1f:3c:36:df:ff:ef:2c:37:e4:65:d3:7a:
d4:ed:48:40:bf:7a:ea:c2:3b:7c:4d:86:d6:95:c7:10:ac:45:
38:ba:16:06:77:27:ed:68:f7:f3:97:7e:db:02:06:73:b2:bc:
6a:3e:53:e5:11:1c:8e:54:56:da:72:e2:81:05:49:f6:ce:9d:
cb:c6:ec:a1:f0:27:90:23:19:1a:27:97:2a:1c:ae:22:ff:ae:
ed:39:df:1c:e1:dc:a0:73:c8:62:76:59:ae:28:a7:90:43:29:
81:6b:f8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:03:45 2025 by rpki-client