Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4454d928-1ed2-36f9-80a7-6f71e4bedd26.roa
File: 4454d928-1ed2-36f9-80a7-6f71e4bedd26.roa (raw, json)
Hash identifier: UrV69KgOmpn0VrjV/mB/eQZQsUn0Kr0SwmnoS9jNBOM=
Subject key identifier: 3D:33:C5:BD:68:D8:06:11:12:9F:EE:B7:33:36:01:8C:B6:F5:06:C6
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858489076027BB9CEAD3C6733BD80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4454d928-1ed2-36f9-80a7-6f71e4bedd26.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 397221
IP address blocks: 199.7.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:02:7b:b9:ce:ad:3c:67:33:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=77e88e52-05b4-4ba7-8dbb-0f4e62241685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d0:50:49:a9:51:43:54:1e:ac:72:9d:4f:30:
89:6a:1c:9c:69:b5:ae:d8:e8:3a:72:d0:6b:b6:bd:
ae:e8:d0:87:14:d3:ba:33:77:60:07:4e:d7:33:f1:
65:ca:ed:81:6e:d9:56:17:08:87:4a:b8:a8:4d:6f:
39:22:bc:f4:03:f3:87:9f:c6:7b:ef:8d:16:04:9d:
c4:c7:7b:4e:2f:38:76:d2:0e:d0:8c:c3:fe:38:43:
71:c7:63:d2:ce:63:99:3a:71:63:e5:53:98:74:14:
ba:85:de:4d:69:25:b7:3c:cb:48:51:ee:76:19:40:
d7:04:73:93:d1:ba:5f:44:0c:d5:af:5a:27:c4:1c:
93:ad:77:35:59:d7:3e:b7:1e:63:47:3a:ec:93:57:
e3:58:0e:91:80:05:af:2c:cd:b7:e4:85:b2:77:e3:
b2:b6:cf:18:fe:66:21:6e:60:44:3f:c3:9d:4d:4b:
f6:ec:8c:f6:bd:1c:a5:75:6c:4e:9e:63:1c:66:b1:
d6:7c:08:f8:48:69:f9:80:05:b3:21:c8:cc:05:64:
d3:6c:eb:2a:ec:0b:40:a8:10:69:a7:26:58:f1:d5:
47:91:bf:4b:5f:ed:17:0f:82:3e:b3:a7:5a:5a:fb:
9b:64:79:1e:69:f7:8f:dd:49:50:93:05:3e:a0:30:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:C5:BD:68:D8:06:11:12:9F:EE:B7:33:36:01:8C:B6:F5:06:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4454d928-1ed2-36f9-80a7-6f71e4bedd26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:b6:1f:53:da:70:f6:2b:95:dd:b7:0e:67:0d:a8:48:97:a7:
4b:bd:01:c2:88:af:e9:ee:5f:8e:5a:33:88:7b:a9:cc:8c:da:
9b:3e:e6:7e:ec:22:89:0d:3b:89:4a:1b:74:6b:aa:28:ca:02:
4e:18:96:41:db:10:ed:5e:8f:0f:6c:9b:38:91:38:c0:43:5a:
1a:23:51:97:9f:25:da:6a:f0:cf:25:2b:d7:89:d2:d9:da:a6:
78:b4:62:a3:42:fc:c7:c8:a0:41:37:76:02:da:dd:3a:07:ab:
99:24:f5:81:ea:05:93:0d:e6:aa:a6:8a:78:c0:ce:7b:44:fc:
34:57:f4:5e:16:1c:02:f1:8e:7b:4e:37:df:69:43:03:98:f8:
9e:89:f2:3c:28:a8:e8:1b:a8:19:67:15:ff:98:f0:67:cf:12:
5a:2f:e5:42:bc:e9:56:70:d8:46:1d:cc:cc:89:0a:89:a9:b8:
ce:8a:77:ad:c0:a8:d5:d2:0f:ef:9e:44:05:b8:18:be:4d:08:
a6:d6:9b:04:9f:1f:42:1e:f7:7f:19:50:79:59:19:71:fb:29:
45:c7:5c:99:f6:11:51:24:6c:88:c3:4e:19:bc:8e:f4:d5:95:
4a:9e:07:51:c1:6d:a2:e0:c0:45:45:a2:63:4f:43:fb:bd:a7:
7e:6c:14:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:24 2025 by rpki-client