Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78/0a88e7b0-bcc1-3345-824e-295ba90e4e5b.roa
File: 0a88e7b0-bcc1-3345-824e-295ba90e4e5b.roa (raw, json)
Hash identifier: Lh2wqz8GaCNoQzax0OZO4XVoPRIyDg1Un+yIRV3wEnk=
Subject key identifier: 98:04:67:31:97:70:90:E7:E6:4B:9B:68:C2:1C:9F:25:F6:3C:18:DD
Certificate issuer: /CN=d197db7a-8a5a-4fd8-b323-b768b4bcca78
Certificate serial: 010D0C9F43285847E62A1D1C388B8622EB4EE080
Authority key identifier: C0:1F:36:9A:9A:ED:E3:56:43:BA:32:90:3C:BA:31:5D:D5:84:92:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78/0a88e7b0-bcc1-3345-824e-295ba90e4e5b.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 19939
IP address blocks: 69.54.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:1d:1c:38:8b:86:22:eb:4e:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d197db7a-8a5a-4fd8-b323-b768b4bcca78
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=62de5540-139c-4634-962c-b3cf1a989f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e6:56:93:6b:52:0b:27:d5:13:a6:bc:75:ce:
4d:4f:17:45:01:8f:e5:7c:2d:d9:05:1e:3d:51:c2:
61:ba:16:ce:3a:32:28:30:3a:58:79:ec:44:d4:58:
10:9e:b2:02:b8:c7:4c:48:32:cc:d2:7d:da:2f:8d:
ba:49:86:84:39:60:73:4a:be:db:cc:59:e1:d2:a7:
4b:83:29:23:8f:83:68:64:fc:fd:47:7a:fc:53:af:
7f:47:9f:fc:58:e9:74:5c:a7:8c:26:45:1f:62:98:
2a:f0:4a:25:c0:98:ea:8d:09:df:a3:1e:66:b7:67:
4c:5d:5d:c5:10:92:7a:6f:4c:98:00:8e:97:30:da:
56:6e:da:ec:f7:b6:86:31:c2:88:87:27:10:2d:1c:
ec:c2:b9:26:4e:46:5c:b6:ba:07:20:a6:7b:5e:6d:
02:e7:3c:42:1c:de:3f:7d:db:28:5a:76:f4:68:1e:
f0:49:c7:3c:5f:f9:45:cc:3a:6f:83:c8:7b:75:0a:
1c:d8:ab:7c:cf:17:58:fc:7f:a2:9c:c9:7a:da:16:
3d:26:73:f8:27:5c:81:dc:4e:73:da:08:70:1c:f2:
82:72:d6:56:89:4e:76:33:00:7c:66:50:3d:ac:67:
47:61:80:0c:b6:a3:a9:db:a5:f8:28:1e:67:25:e5:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:04:67:31:97:70:90:E7:E6:4B:9B:68:C2:1C:9F:25:F6:3C:18:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78/0a88e7b0-bcc1-3345-824e-295ba90e4e5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78/d197db7a-8a5a-4fd8-b323-b768b4bcca78.crl
X509v3 Authority Key Identifier:
keyid:C0:1F:36:9A:9A:ED:E3:56:43:BA:32:90:3C:BA:31:5D:D5:84:92:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d197db7a-8a5a-4fd8-b323-b768b4bcca78.cer
sbgp-ipAddrBlock: critical
IPv4:
69.54.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:ee:d3:d7:55:b7:6e:55:cf:85:cf:01:c2:04:0b:5e:8e:97:
60:29:dc:a3:a6:03:e3:65:12:8e:0e:12:39:df:ff:47:21:dc:
54:74:74:dd:f6:7c:cd:b8:65:72:c7:8c:ed:46:fb:12:2a:21:
12:f5:09:cc:86:99:1f:da:d0:d6:06:14:8a:15:d7:74:bc:6a:
30:fe:02:02:88:f8:37:c6:99:52:30:49:c5:9a:5f:77:37:39:
42:31:d8:b3:03:3c:62:16:34:e5:be:b1:d5:34:be:8d:c6:31:
7b:4d:a2:05:7d:5d:e1:0c:88:95:aa:0e:84:d5:81:1d:ab:cf:
78:3b:d0:d9:fc:23:45:99:04:99:b3:f6:40:d4:02:b1:d8:70:
bb:fc:02:da:a2:6b:b4:33:b5:e5:da:98:22:6d:05:c7:62:bd:
45:62:b6:ae:00:9e:d2:d5:9d:76:b1:c4:01:4b:8f:ae:77:97:
62:87:83:a1:7e:ab:d6:60:1b:2c:24:c4:5b:19:a1:f9:a1:28:
00:38:2e:2c:c1:86:87:36:a0:cc:2d:30:ce:9b:0b:aa:3e:f4:
e4:9f:d3:ec:92:be:49:5b:45:8b:89:8d:2a:71:15:39:c9:7f:
a5:79:68:2e:ca:1a:a4:eb:a9:5d:34:98:8f:2b:31:9e:3d:d6:
51:19:fd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:56:13 2025 by rpki-client