Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa
File: aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa (raw, json)
Hash identifier: H5L5oA4zm2/Rf1YjWmbUhLbsu/UpwKZnInUgEL2lKkA=
Subject key identifier: 79:B1:19:66:50:B7:C1:95:35:1C:58:E6:00:E2:28:57:88:C6:57:A2
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858485CD02DFFC0A9B889B2318980
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 15204
IP address blocks: 64.33.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:2d:ff:c0:a9:b8:89:b2:31:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=d34ffeea-41b9-42d3-ab28-f22c25ce917c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:ba:e8:6b:1b:03:fd:b5:03:ef:43:bf:17:
64:97:5a:95:b7:dd:d1:ce:60:c6:11:a5:c2:54:30:
d3:70:ca:5f:21:1a:f0:ab:2c:8a:12:90:f0:8b:46:
8c:6e:ee:3f:6a:2d:7b:69:15:b1:41:8b:3a:07:55:
a5:49:63:0b:90:40:0e:cc:38:93:db:41:05:d6:91:
2c:e1:31:6b:53:66:9b:72:99:3c:27:29:3d:bd:74:
fc:b7:83:f9:1e:b9:bd:4f:69:70:64:36:8e:6c:55:
00:8b:8c:cb:7e:5e:d8:7a:b4:66:72:41:64:87:d3:
ec:87:87:2d:ef:c0:6d:84:49:f3:a2:30:81:35:16:
a8:30:3c:61:40:93:5d:86:14:5c:d8:3f:21:01:41:
37:9a:d3:2a:5e:6f:58:ea:e6:df:bd:3d:9a:82:85:
d2:13:92:e1:2b:a9:8e:02:61:d5:7d:b6:44:5e:50:
df:37:4f:89:6e:e2:6e:91:c1:43:8e:97:6a:f0:80:
d4:f0:e8:85:7f:19:5f:7e:c7:ce:70:f2:f0:9e:ad:
ee:c7:95:17:c2:4f:4f:4f:33:b3:32:2d:9e:97:e1:
4e:29:80:7f:8a:b5:7f:01:c8:0a:12:20:c7:07:62:
4b:f5:c6:83:a8:d9:73:50:84:9e:a7:3b:1a:6f:42:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B1:19:66:50:B7:C1:95:35:1C:58:E6:00:E2:28:57:88:C6:57:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
64.33.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:57:5b:d4:2f:5a:c2:c9:0e:d1:f6:3a:94:57:fe:64:e6:6f:
17:52:16:63:6c:44:bd:0d:d5:79:cb:f8:cb:08:b7:fe:db:07:
2e:5a:54:18:f5:bf:24:d3:e7:d0:d0:35:e8:d2:16:af:c8:a3:
a7:66:26:f6:f7:fb:90:01:c0:d2:c2:8d:c2:ed:78:44:d8:bc:
48:af:0b:07:ad:dd:29:6f:5d:27:f6:47:68:88:ad:43:75:e7:
03:59:b3:44:16:fd:ff:ed:0c:d1:5e:d1:37:68:fd:a6:20:15:
74:2f:03:0e:06:c1:9d:f0:12:b4:6a:bb:d2:dd:4d:f6:3e:91:
f6:69:8e:82:c4:5a:b8:f6:c3:bc:19:b6:a1:a0:f7:e2:9b:43:
74:f2:83:a2:de:42:9a:62:03:15:b8:32:27:9e:2e:7e:f0:1a:
4c:fe:af:87:73:b5:0b:de:4a:79:54:a3:bb:fe:c8:f5:23:1a:
6d:45:12:65:ac:98:53:d8:31:2f:25:6a:8c:5c:d3:04:19:1e:
5c:fa:fa:e4:20:46:94:c8:ad:11:62:c3:66:cf:85:c5:e9:7e:
4b:df:02:48:5e:43:e5:4b:3b:d6:75:76:8c:14:a9:b8:b5:e6:
ba:fa:5b:22:1b:22:53:1c:5b:f9:ef:68:44:c7:ef:62:75:6a:
06:8a:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:12:12 2025 by rpki-client