Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa
File: b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa (raw, json)
Hash identifier: X58y9pGv+/HO1c7nBzXuUDZBRZcaDTrKFvvhlzxF6dc=
Subject key identifier: 02:A9:6A:29:7A:72:5D:20:E9:D8:68:83:35:08:A2:45:E1:46:CA:A4
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F432858480EA513452325C8F9FD20A500
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 2734
IP address blocks: 67.212.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:13:45:23:25:c8:f9:fd:20:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=69339058-72c5-4a9f-b558-91c894f77378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:e6:fb:e2:74:9e:b8:f0:ba:ad:98:35:7c:
74:0d:3b:28:7b:a6:39:90:78:2f:61:9f:b2:30:c7:
dc:ac:29:8a:fe:31:b5:ac:a8:b4:94:ed:b0:d6:09:
26:73:e3:ef:d4:18:9e:d5:66:a9:61:74:14:e4:0e:
c4:e9:06:b0:58:9b:88:0d:f4:0b:c7:72:08:7b:23:
5c:f5:bd:74:1e:66:9b:1c:37:97:21:7f:b3:4d:fc:
f1:1e:39:08:70:2b:07:db:52:fd:26:26:34:07:1e:
50:b0:32:97:bf:33:a2:42:a5:3a:af:65:1a:2e:80:
26:83:7d:13:89:75:47:65:c6:d8:51:1c:85:49:77:
03:b3:31:f7:50:0d:f3:95:4b:02:1f:a4:4a:e5:e3:
64:24:b5:b0:2d:ec:16:07:ad:0f:04:70:c1:9a:d8:
34:c5:aa:d6:fb:0a:4a:d4:3d:9b:d6:bc:ba:31:1d:
e1:be:53:e9:f5:78:0c:f0:9b:de:4a:26:56:81:d0:
2d:9d:a2:42:cc:21:dd:a6:64:b2:31:ab:65:ed:90:
f7:30:f7:d0:2c:a6:fe:01:00:5f:a9:be:52:73:fd:
aa:b4:8f:64:b4:bc:66:78:c9:0c:0e:d3:46:56:0c:
16:5e:b4:0e:2a:a7:5e:ee:f0:1d:bc:23:79:7e:c2:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A9:6A:29:7A:72:5D:20:E9:D8:68:83:35:08:A2:45:E1:46:CA:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
67.212.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:67:af:c1:bf:61:97:4d:b2:c9:a7:bd:b3:79:d8:c4:86:18:
d6:c9:14:34:b4:77:67:85:be:16:76:c8:6f:b6:1d:5b:b8:da:
83:39:13:10:ae:a4:6e:1e:c5:70:b4:63:a8:22:6a:fe:d5:60:
b7:f8:9d:81:e2:ad:b2:23:50:48:3a:57:c4:e4:c1:37:9a:9f:
e4:61:38:62:1e:88:2b:f2:82:fd:56:01:74:55:97:fc:ec:48:
cd:be:ce:6a:70:31:af:fe:4f:dc:42:43:eb:c0:da:5f:bc:d7:
da:90:68:b9:de:12:e7:73:f5:c6:f9:5a:44:76:f4:8d:1e:2a:
39:ff:5d:3d:b7:01:c8:44:49:5e:7c:bd:60:c9:e6:ac:d1:ac:
97:a8:dc:fc:e4:a5:dd:bc:68:96:5b:59:6a:c6:9d:e5:65:44:
56:e4:ef:90:e3:fd:ba:b8:1f:b4:21:0e:da:96:f0:63:0e:39:
07:0b:3f:07:d9:df:73:dc:13:78:46:5e:a3:b9:82:83:fe:a2:
38:b1:48:1b:b1:9b:5f:7a:3a:ff:44:88:a2:39:de:03:aa:9d:
e9:eb:6f:56:95:0c:fb:fc:88:54:d7:fe:cb:c7:46:cb:9e:13:
0a:a7:3a:fe:3b:0a:fd:f4:a3:f7:9e:4a:2e:2b:17:9d:2c:bf:
fd:3d:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:24:06 2025 by rpki-client