Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/287ef630-99a2-3d8b-a99f-08d6be573b12.roa
File: 287ef630-99a2-3d8b-a99f-08d6be573b12.roa (raw, json)
Hash identifier: SHM6HaNAJ9m3i/HR5BdfSkkQq6WH5WkuxnzlVW5Vvcg=
Subject key identifier: 53:83:90:8C:97:D1:3F:2F:EE:21:CA:B1:CC:19:0C:54:8D:4D:1B:46
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F43285848C581883A0FC6C196414C8700
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/287ef630-99a2-3d8b-a99f-08d6be573b12.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 209.107.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:88:3a:0f:c6:c1:96:41:4c:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=58a7cb5c-528b-4bcc-b2fc-6c38fa4bd358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c6:bd:ae:1d:5b:68:8d:2e:c9:74:e9:d3:ab:
53:a5:dd:01:64:4d:d5:5b:40:47:1b:5c:4a:d6:44:
58:32:01:80:aa:91:ad:82:f0:4f:e5:ee:94:e5:7b:
a7:f6:98:67:d3:47:cf:b9:f5:d7:90:d3:49:4a:9e:
99:94:65:40:6d:bd:f8:6c:91:42:2d:bf:1f:ae:67:
20:da:0c:a4:19:61:86:57:24:cb:b1:09:6c:aa:0f:
0b:17:86:ae:b7:cb:90:e2:fd:f8:e9:d0:5b:5b:9f:
ca:4e:82:ba:72:bb:c5:f6:4b:42:12:b5:08:a0:4e:
8f:75:ee:4d:9c:c5:20:f2:f1:de:0b:26:4d:5b:ad:
43:9c:7a:0e:0e:9b:0e:8a:98:5c:9f:96:56:e9:30:
77:6a:6d:34:ab:a8:55:b7:bf:72:39:6b:7b:54:64:
1c:68:a6:a6:fc:7e:d9:cc:5e:42:9d:60:92:7a:d8:
51:6f:11:05:61:10:45:c8:81:c8:19:9f:8b:69:09:
77:ae:26:0f:53:50:ba:15:75:a9:58:97:af:63:3f:
2b:f6:85:61:4d:13:05:39:14:31:96:25:e5:8b:f2:
7e:08:36:77:77:e4:4d:b8:5d:b4:fc:00:1c:a1:5e:
81:30:6d:8e:24:0f:7e:14:40:f9:9e:fb:62:92:c2:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:83:90:8C:97:D1:3F:2F:EE:21:CA:B1:CC:19:0C:54:8D:4D:1B:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/287ef630-99a2-3d8b-a99f-08d6be573b12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:36:c6:d0:b3:74:aa:16:d6:1d:ca:4b:58:7c:09:5a:64:0e:
4c:10:e3:5f:97:e2:2d:53:fd:0b:17:7a:b3:9d:2b:38:c6:1a:
c2:1d:65:6e:8e:79:e8:cc:ff:d2:5a:42:d1:46:22:d9:78:14:
1d:c5:9e:e3:ad:a8:60:1f:96:92:0a:aa:37:2f:4d:76:45:51:
be:53:f3:2b:e3:eb:cd:9f:41:84:93:84:bf:28:52:86:04:71:
ef:46:91:9e:bc:a9:25:66:1b:34:a4:31:a8:26:dc:73:45:fb:
f6:a2:1a:22:08:df:be:6b:4b:69:ea:7e:93:cf:48:eb:24:b1:
04:6c:49:20:94:ef:e7:13:16:9a:ec:ce:ed:8a:ba:e6:7d:37:
5b:7d:96:ad:9f:f3:03:3b:de:0d:67:2e:ec:04:e4:07:26:f6:
0e:73:b5:3c:86:fb:f8:93:d1:38:f6:50:70:2b:a9:cc:09:98:
00:14:47:aa:cf:b5:fb:3d:ab:86:79:57:1f:26:6d:a7:93:68:
dc:d6:38:f9:87:dc:ee:f2:5f:a1:34:99:3f:05:ad:96:47:de:
28:ac:a9:c0:8f:44:28:d0:de:46:fa:3c:15:34:0d:77:69:9e:
7b:7c:b0:54:55:70:06:0c:9e:73:5b:49:0d:b3:75:0e:e4:2c:
36:1b:6b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:48:52 2025 by rpki-client