Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3795afcf-5858-3b52-83e5-2c52f0334582.roa
File: 3795afcf-5858-3b52-83e5-2c52f0334582.roa (raw, json)
Hash identifier: TaBD2R7+5M1SOJwRBlYCMgrjBSd8S+S5KJy1JawWHlI=
Subject key identifier: 5A:D2:1B:69:0F:E5:72:BC:ED:32:45:3C:8B:E8:CA:81:30:8F:75:E7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01EC78F8ACDEB08563700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3795afcf-5858-3b52-83e5-2c52f0334582.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 400228
IP address blocks: 64.62.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:1e:c7:8f:8a:cd:eb:08:56:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=26a9e932-0d78-4b89-81db-3621620fe2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:11:02:37:87:36:fd:fc:4c:55:cf:7a:1d:
8f:72:7c:fd:df:a4:72:ac:e2:84:ce:5b:04:d0:a3:
c7:50:22:2d:ae:7b:4c:45:2b:70:60:39:e4:5e:33:
63:27:cd:3f:91:8b:65:d1:62:ae:43:bc:49:dc:13:
18:1f:95:13:80:f4:6c:d0:d6:ae:fb:62:71:67:80:
9d:c0:6b:4f:ae:86:b1:2b:4f:02:77:6c:99:92:b8:
89:12:26:ff:f6:15:85:94:6c:1c:ec:e8:fc:5b:75:
1e:48:ea:50:26:92:67:0d:81:d9:f5:fc:f5:fb:23:
4d:15:c2:10:e2:d2:b6:cc:a4:17:d5:77:03:f1:e3:
2b:f8:90:43:d9:4b:82:7f:31:66:8a:98:5a:60:24:
80:c0:c6:51:27:e9:4b:a0:5c:ac:cf:e6:95:4e:ee:
77:95:e9:91:a0:9c:5a:8a:06:68:e0:cb:6f:25:29:
df:d3:ad:c0:d1:af:6d:e8:7f:8e:6f:93:d1:6d:b3:
8e:bc:2f:6a:d9:02:88:6c:28:4e:d7:40:20:24:1c:
ba:66:06:56:67:d1:93:6b:6e:e7:a5:34:f7:fb:aa:
f2:dc:5c:d2:41:35:6f:2d:46:eb:e1:9d:aa:c2:89:
07:39:ef:f0:9c:3e:35:ad:e8:86:88:3a:2e:0e:65:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:1B:69:0F:E5:72:BC:ED:32:45:3C:8B:E8:CA:81:30:8F:75:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3795afcf-5858-3b52-83e5-2c52f0334582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:9b:d6:7e:ac:1e:5a:d6:88:1c:dc:b4:6b:66:58:18:02:5c:
2c:d7:72:82:81:a4:0f:c3:36:0f:f8:e6:c1:ac:c3:ea:c0:54:
32:c3:f1:74:cc:57:8c:85:b2:c7:70:f5:3c:a7:62:1f:74:30:
e1:f2:5f:9c:11:85:f3:b0:40:8e:22:c5:4c:f4:00:0a:f3:e9:
8f:c2:df:55:d8:d4:07:a6:23:c6:b1:63:d8:10:2b:43:0e:04:
bb:5e:e0:35:88:e7:9a:7c:a6:49:7c:f6:0d:8c:7e:1a:39:94:
4a:10:37:39:ab:94:61:39:00:08:82:59:02:85:05:94:49:03:
48:bf:e2:e5:9a:92:5a:d3:5f:cc:a2:b9:bc:cf:70:c3:72:4b:
bd:b1:ba:b7:7b:07:55:a1:ae:75:62:22:4a:5a:13:2d:e9:1b:
ae:e3:fa:d7:78:8f:11:89:d3:5c:0b:60:34:62:79:5a:26:4c:
3f:78:4f:a4:f0:90:cf:61:f7:00:ce:f2:bf:ba:39:64:40:36:
f7:62:b8:cd:70:d0:00:d8:9e:38:f9:bc:0b:77:f8:cb:59:f4:
e4:10:21:18:8a:3d:af:63:1f:7e:93:a7:8a:cf:b6:48:b8:e8:
ab:34:39:77:e9:02:97:d3:97:1e:69:ce:27:56:f3:d4:6b:03:
e7:57:3f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:56:46 2025 by rpki-client