Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/54e0a440-ce28-3ec7-9337-b8b390efc8a1.roa
File: 54e0a440-ce28-3ec7-9337-b8b390efc8a1.roa (raw, json)
Hash identifier: wlHtCLkm6Cp0bQrUQGwcF9ZHFsUmkjk0D4SZ+Xxg0ps=
Subject key identifier: 2C:54:2A:88:64:76:D3:CF:66:6C:6F:90:13:A9:E6:A5:07:DE:7A:54
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00853A3DB26246256E3E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/54e0a440-ce28-3ec7-9337-b8b390efc8a1.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 394330
IP address blocks: 64.71.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:08:53:a3:db:26:24:62:56:e3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=3efdc6df-8a58-4908-89d3-1ff3b3778be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:09:d0:3f:7d:11:08:99:f7:5e:8e:67:83:
77:51:48:c7:28:98:01:e9:83:3a:05:79:51:11:78:
cc:3a:94:b8:3c:6c:ca:a3:fa:35:53:19:3a:6f:5c:
15:45:ee:d0:0e:13:85:6a:35:ee:36:bf:f0:ad:7a:
9c:8a:1c:a8:0c:97:5a:73:3e:2f:3b:e8:05:3c:37:
23:8f:29:65:cd:7f:27:55:c4:2e:de:4c:37:cc:0b:
98:7e:bc:e1:af:ec:63:0a:05:22:5d:84:fb:6e:09:
ed:02:b0:00:83:fd:80:8a:92:d7:8f:be:27:32:d2:
53:1e:4a:e7:44:d0:b3:58:d0:13:35:ea:29:58:43:
ef:57:93:03:15:37:6a:12:bd:c1:f2:85:fc:ed:32:
2b:40:93:32:39:ec:cf:30:11:c4:d1:95:0f:c5:3c:
47:32:4f:8f:20:2c:81:17:66:04:54:8e:df:5f:f1:
95:f7:60:7d:05:6b:86:eb:01:43:15:71:20:3f:0b:
f4:a9:50:e2:f5:aa:49:9f:ac:c4:c1:4d:92:98:fc:
16:ba:cc:9e:14:d7:6c:ac:7e:d6:e7:37:ff:a1:24:
80:5f:cf:0f:b5:29:3f:79:c3:14:f0:92:05:ab:37:
87:58:c0:08:d2:55:f8:c5:b5:b6:64:f4:6d:bd:a9:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:54:2A:88:64:76:D3:CF:66:6C:6F:90:13:A9:E6:A5:07:DE:7A:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/54e0a440-ce28-3ec7-9337-b8b390efc8a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:66:9b:ed:27:f8:d6:f2:58:ec:2f:e7:6b:f3:0f:2f:1d:7e:
75:9a:3a:48:cb:17:78:3d:56:fe:81:67:4a:74:65:bb:1d:87:
a6:57:c4:71:d0:7e:d0:94:f3:89:b0:6b:f3:c4:70:75:5e:07:
13:3e:46:c5:09:b3:d8:24:24:23:b8:17:40:52:e7:ce:9e:5a:
80:f5:b4:0d:f0:94:a3:44:88:6d:e3:e9:4d:48:db:b1:d8:a6:
86:ab:7c:cf:95:c6:1b:ed:fa:f3:17:e6:ef:e5:0d:fd:6f:e6:
fe:e7:6b:19:6b:90:52:98:c1:b1:1c:3e:17:d4:d5:5b:3f:65:
1e:26:e7:6b:83:fc:a2:24:c6:07:c6:18:29:83:35:6a:c5:b6:
a0:f2:93:ae:6e:07:e0:51:9c:2c:7b:77:b2:a7:0e:3f:ad:32:
09:07:90:ac:f0:c5:f3:d5:56:c2:cf:f1:2d:f8:09:6c:7b:4e:
e2:5e:bb:e4:cd:e6:98:b7:04:6e:64:8e:65:aa:7f:61:10:62:
b0:62:84:62:d9:de:c3:51:a1:0f:32:e6:62:98:a6:9a:35:8f:
2a:5b:98:f6:ae:41:87:9b:52:75:d7:f4:d8:5b:23:41:33:11:
03:f2:09:94:7d:06:40:59:3c:21:aa:ea:8a:e1:9a:30:e2:e7:
81:19:34:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:20 2025 by rpki-client