Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/aacc2a55-1e9b-31a4-949a-789abbe4518d.roa
File: aacc2a55-1e9b-31a4-949a-789abbe4518d.roa (raw, json)
Hash identifier: Q1POLvKW1JpzOWkPPlKrT4UckOxZHFVNqHCmlwsRdAg=
Subject key identifier: 63:64:DB:57:A1:60:43:82:D9:93:2E:95:B7:46:D3:7F:ED:F3:D6:C6
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F43285849674EF238B4D87686CEAB4880
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/aacc2a55-1e9b-31a4-949a-789abbe4518d.roa
Signing time: Thu 03 Apr 2025 13:01:02 +0000
ROA not before: Thu 03 Apr 2025 13:01:02 +0000
ROA not after: Wed 02 Jul 2025 13:01:02 +0000
asID: 22070
IP address blocks: 64.99.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:67:4e:f2:38:b4:d8:76:86:ce:ab:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Apr 3 13:01:02 2025 GMT
Not After : Jul 2 13:01:02 2025 GMT
Subject: CN=a8afeee2-b812-4929-8b75-7fcdf8856f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:1b:68:7f:cd:1f:9b:01:32:27:87:0e:fc:
31:fa:d8:39:2c:4c:52:0b:52:47:82:60:32:42:b8:
e6:e1:a7:9d:ad:46:18:83:8d:f7:fb:8d:d4:12:d8:
98:8f:8a:48:6a:7f:44:1f:d1:58:e6:c8:90:30:a5:
0a:6c:77:c3:2f:60:c0:98:93:0f:96:43:76:3d:e8:
c8:ce:e6:9e:f4:63:ad:69:62:65:d0:58:93:4e:1a:
22:03:a7:fe:c4:1a:cd:42:83:e6:67:8e:20:5e:0e:
94:bd:41:1f:6d:36:bb:a5:8a:65:f7:a8:18:f7:cd:
88:4c:5f:e8:5c:4f:9f:a0:03:b5:7a:40:37:15:f6:
c4:30:fe:bf:f0:6f:0b:46:1f:a6:93:97:93:d8:d8:
8f:8e:55:56:b5:80:ea:33:95:b7:80:09:f2:5e:77:
01:e6:33:ca:16:36:ba:f1:fa:77:bb:24:24:37:c4:
99:46:16:3d:76:67:21:56:93:42:e9:2e:6c:5d:d3:
df:e0:36:6b:4c:13:7f:ec:51:64:1d:bf:55:d5:c0:
99:04:42:6c:3d:59:0f:21:c9:22:7e:8f:db:d1:63:
65:21:0f:2e:0a:e1:c1:bb:1d:f3:98:08:fb:28:bb:
aa:a2:ba:58:59:fd:b6:c0:5d:13:b7:7c:70:bf:01:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:64:DB:57:A1:60:43:82:D9:93:2E:95:B7:46:D3:7F:ED:F3:D6:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/aacc2a55-1e9b-31a4-949a-789abbe4518d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.99.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:0f:ad:e4:4c:98:7c:21:75:41:c1:17:10:99:c0:3b:05:2d:
b5:92:6b:7e:f4:35:e3:37:d0:b5:c0:1a:df:ff:e2:c9:6f:59:
f2:5e:94:4b:62:3a:a5:b1:75:4b:04:c1:60:df:7e:77:18:e3:
e5:ca:1f:cb:68:1c:0f:d8:7a:3e:1b:f7:5c:fe:8d:fd:05:7e:
fd:e6:8d:1a:f9:48:d1:5a:70:62:52:7e:c7:d8:c3:46:f5:d9:
f0:7c:fb:06:e7:b9:4e:7a:f1:00:0d:ef:82:74:a0:4e:38:36:
57:24:98:fe:fb:9e:1f:72:79:fb:5c:8d:eb:a8:9a:14:89:15:
46:f1:a3:7f:41:81:1a:a0:a9:16:70:b0:d3:5e:3a:e6:e0:20:
97:30:55:38:dd:08:05:f6:59:3f:94:54:c7:c9:ea:a4:13:00:
47:ba:d0:25:e5:72:48:cb:3d:2e:e3:e0:3b:36:e9:3d:49:ae:
14:29:d0:97:39:2f:d5:44:42:e2:ae:cc:d5:29:fe:1c:7b:e6:
52:d4:f2:7e:fc:5c:1f:a9:de:53:c4:98:b4:27:1a:7c:a3:d0:
33:55:d1:fc:b9:16:f2:46:6e:b1:80:af:0a:e5:fc:c4:5e:ed:
b8:d5:65:27:84:0b:2b:13:30:3e:5d:90:a5:04:ce:d9:3f:37:
e2:02:7b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:30 2025 by rpki-client on console.sobornost.net