Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3fc658a3-b1a6-39fc-b524-136d943f9d1f.roa
File: 3fc658a3-b1a6-39fc-b524-136d943f9d1f.roa (raw, json)
Hash identifier: G82rTvW28x8jZWiE20PlKB9ijJTtWhDsVkEjTU73+Sw=
Subject key identifier: 43:75:82:AB:E6:18:9B:E8:E5:4F:1D:D9:08:F9:3E:43:42:9D:E2:FD
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F43285849674EF260CDCAF9DD5966EC00
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3fc658a3-b1a6-39fc-b524-136d943f9d1f.roa
Signing time: Thu 03 Apr 2025 13:01:02 +0000
ROA not before: Thu 03 Apr 2025 13:01:02 +0000
ROA not after: Wed 02 Jul 2025 13:01:02 +0000
asID: 32133
IP address blocks: 64.98.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:67:4e:f2:60:cd:ca:f9:dd:59:66:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Apr 3 13:01:02 2025 GMT
Not After : Jul 2 13:01:02 2025 GMT
Subject: CN=affc6a93-84b4-47b2-a949-ae6a2fefd2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:58:4a:80:d2:b9:06:55:8a:75:d4:b3:c7:
1e:6c:3b:a8:06:0c:70:3f:33:2d:14:c9:9b:6f:f6:
4e:39:7b:8a:4c:2e:60:55:1c:a4:c4:7f:9b:e0:ff:
5b:60:58:b8:26:3b:16:d3:ed:2d:9b:5c:59:3d:be:
8a:e5:6a:c6:d6:dd:91:d0:6f:9b:36:9f:bf:85:d5:
4f:01:2a:d0:49:18:cf:3b:f3:ef:23:13:d7:06:3d:
a6:02:af:d1:3a:bb:96:2e:9c:2a:1f:42:a0:29:cc:
71:7c:ed:e8:21:f3:04:3e:99:18:51:cd:b8:e1:cc:
26:35:36:ad:68:f5:2c:bc:d4:17:87:cd:4b:e9:82:
62:b3:44:9e:b7:5f:6b:7f:0f:e9:a1:b8:11:6f:89:
c3:ab:c7:51:bf:3a:2e:8e:52:01:01:96:a5:87:f0:
8f:6b:99:c7:66:f1:4c:32:7d:14:e1:d1:45:74:05:
7a:8b:33:c7:4a:f0:40:5c:6f:53:d1:97:a6:b6:62:
a8:68:01:27:af:b0:83:d5:ef:f6:f2:4c:5f:3c:53:
8a:f0:87:ef:d4:08:b6:48:4b:bb:f7:08:72:7f:37:
1c:67:e2:0a:3b:93:79:86:82:68:be:44:22:1c:4a:
10:1f:8f:c2:24:af:63:5b:8c:19:83:9c:a6:5f:46:
f9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:75:82:AB:E6:18:9B:E8:E5:4F:1D:D9:08:F9:3E:43:42:9D:E2:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3fc658a3-b1a6-39fc-b524-136d943f9d1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.98.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:37:bb:5d:cb:94:d2:79:c5:01:8f:ed:c8:b6:be:9d:5d:a2:
a4:e6:57:79:eb:76:ad:2e:d9:9e:d8:40:7e:ff:5c:7e:f8:9e:
bd:9c:c8:7f:1f:77:c6:9c:7c:61:ef:cb:ec:c3:1f:13:14:98:
8e:1d:a0:c7:0f:60:53:53:c9:97:45:b9:91:ee:fc:a6:58:6b:
c8:f1:d4:55:39:5e:62:c5:49:a5:b5:e1:ec:09:cf:97:b9:cf:
3d:fd:fb:7a:94:e6:51:3c:9d:08:ba:3a:3c:cb:b0:31:55:e6:
5d:e1:29:ed:99:25:62:78:de:4c:28:9c:a3:53:a5:4a:fa:3f:
10:36:c1:4e:80:6e:10:6e:0e:8d:9c:34:2e:02:cd:d3:b5:38:
78:45:75:3c:e7:83:98:c2:38:25:d3:dc:f9:93:47:c7:27:45:
ec:be:46:89:96:4e:d4:c9:8f:69:71:26:8b:12:36:30:cd:c5:
62:e3:58:78:37:df:e1:a6:24:ef:48:0c:18:79:ba:b5:2e:74:
1d:6e:7e:20:b5:b4:ce:b0:9c:b9:89:40:ab:39:45:86:a4:4d:
17:ba:f4:ca:6e:01:98:16:70:52:48:d0:a6:9c:e8:a2:72:46:
fa:cb:5b:54:bd:d1:f5:9b:15:2d:bb:2b:9d:2c:09:d3:22:d1:
d0:41:64:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:30 2025 by rpki-client on console.sobornost.net