Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a72ece2e-6266-36fc-9280-c6e04b5d7e4f.roa
File: a72ece2e-6266-36fc-9280-c6e04b5d7e4f.roa (raw, json)
Hash identifier: hbEsba6jwNXGrOU97Ra3SEenrVIUm+3J5Ml4khPzvIM=
Subject key identifier: E1:73:06:4C:61:D4:A9:A1:22:67:54:75:B7:5F:7D:F4:D6:6C:E9:D1
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFEED067DFA2433777F2E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a72ece2e-6266-36fc-9280-c6e04b5d7e4f.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 54288
IP address blocks: 64.62.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ee:d0:67:df:a2:43:37:77:f2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=031ee481-7f6a-470b-a259-78077dca46a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:3f:b5:e5:89:04:3e:f7:4a:ef:a7:c4:86:
b4:00:83:ca:3a:75:86:1c:ec:21:fa:e3:e1:6c:21:
e3:7b:90:03:0f:ad:51:ad:58:64:3a:2f:4d:ca:d3:
d3:ce:75:c3:d2:ca:d2:32:51:94:7f:cc:c5:17:c6:
71:42:66:84:cc:19:fd:31:cf:bc:c8:54:f0:65:41:
db:a1:46:cd:76:4a:57:92:ab:c6:13:cb:bf:00:b1:
62:f0:bf:46:f7:02:12:f8:de:76:fb:8f:98:7f:66:
00:c6:0b:b8:32:e2:bb:9f:ce:49:9c:dd:b3:ae:39:
06:98:f7:b6:d4:23:a1:30:05:4c:bb:73:86:0d:1e:
39:23:eb:e9:7a:b3:17:a6:e1:ea:79:2e:4a:53:d3:
7c:51:5d:13:38:bc:e6:f6:0d:06:e3:4c:2f:2f:8e:
39:ae:37:bc:ae:2f:87:26:0a:2b:81:16:4b:dc:6d:
0e:ce:62:5c:e5:e4:6b:d5:e5:6f:f9:4e:8e:56:91:
bc:28:df:bb:a4:d9:a3:0b:e2:b5:eb:f8:7b:e8:af:
27:6e:38:f6:cf:66:57:2b:06:a8:66:a1:a0:76:90:
ab:10:26:a0:94:93:7d:5e:de:be:6c:83:84:77:3c:
ec:12:11:27:b4:91:f8:51:5d:ef:61:b6:be:7a:25:
2b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:06:4C:61:D4:A9:A1:22:67:54:75:B7:5F:7D:F4:D6:6C:E9:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a72ece2e-6266-36fc-9280-c6e04b5d7e4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:b3:ee:3a:98:bd:6f:de:c5:74:a6:44:de:32:5e:af:d5:66:
be:26:4b:dd:89:a9:d0:aa:01:5c:53:b7:3b:eb:46:43:28:b2:
b2:ed:d1:98:4e:83:cc:f2:e1:65:5c:7e:fb:eb:a7:1f:2c:a1:
e4:08:94:88:b5:98:7f:b0:95:1c:a4:f2:fc:13:95:83:17:9e:
00:34:81:48:a8:50:fd:1a:9d:7d:a7:28:c5:64:a0:a5:59:cb:
7f:1a:37:cc:c4:16:bb:7e:26:10:e3:07:41:0e:a6:8d:ea:bb:
be:5f:59:7f:b6:83:9a:60:f7:bb:a5:6e:8a:46:f1:fa:c1:cb:
f9:53:7a:4b:a1:e6:57:ee:0c:bd:52:52:65:80:d3:7d:77:17:
a8:dc:01:7f:aa:0d:6a:3e:8c:fd:ea:4d:aa:15:83:60:6e:47:
0e:8b:36:7d:0d:8a:2d:ad:0b:13:f5:d9:9f:a1:4f:82:be:c3:
2a:72:61:d7:c4:8b:73:23:c4:45:81:ef:0a:67:19:05:bc:a7:
59:3f:ee:3d:03:0c:1a:c0:64:b2:43:04:4f:4c:73:e4:e9:dc:
cb:ef:11:0f:49:75:fe:97:d6:13:93:4f:d4:bf:de:17:53:e8:
69:97:d9:79:55:e1:f5:b8:6c:19:5c:36:75:e3:81:f5:02:dd:
3f:cd:0c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:30 2025 by rpki-client