Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa
File: 2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa (raw, json)
Hash identifier: idKPKmVRQ/TOSWSGT2PH1KiQc3/TgFHvObgqtJg5/1Q=
Subject key identifier: 6A:20:6B:8D:04:50:02:51:F2:D0:57:B9:AA:06:49:8C:B2:A2:91:D6
Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Certificate serial: 010D0C9F43285849151156F3AB789C099FD7C6C0
Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 400790
IP address blocks: 207.228.217.0/24 maxlen: 24
2606:f6c0:40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:56:f3:ab:78:9c:09:9f:d7:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=31c1175a-9aa9-4bcf-91e7-da8c0df21412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:88:b7:0a:04:20:b3:84:91:19:f6:2d:dd:
a7:e6:91:d0:2f:4a:cb:90:18:6f:f5:f1:37:89:19:
16:28:27:2d:53:7b:f1:34:af:05:74:e0:58:1b:c9:
e2:6e:e2:f4:66:e0:74:8a:9e:6f:c8:c7:81:ae:20:
5a:47:d0:e6:44:a4:76:cb:d9:b0:d7:b6:0a:5f:73:
17:8e:22:aa:e1:63:66:37:1e:e7:07:f3:c3:5d:5c:
07:12:ff:83:5e:c6:6b:b6:60:42:01:21:bd:6f:c4:
fa:92:66:d7:39:c8:a6:62:b6:4e:ec:62:51:93:9d:
12:0f:89:5a:b5:d2:74:a5:db:df:a0:cd:1e:4a:ed:
5f:5b:a9:53:dc:4d:34:cb:d0:20:7d:51:f5:23:4e:
d3:d9:76:67:b1:11:39:79:6d:4c:12:ea:11:b4:31:
7c:af:69:15:71:20:c1:95:00:97:ea:ce:67:99:c1:
42:22:43:74:e1:1f:ef:1b:4f:f6:a4:fd:31:fd:51:
8e:94:a1:1d:13:75:c1:7e:2d:c8:fa:ec:77:0d:35:
86:09:6f:d8:3b:70:c3:10:b9:bd:27:95:89:7c:82:
74:b2:52:d5:68:21:7a:0d:d5:05:d2:70:a3:2c:ca:
0d:d0:f2:38:3d:a0:89:e7:94:b8:88:85:a9:e5:4e:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:20:6B:8D:04:50:02:51:F2:D0:57:B9:AA:06:49:8C:B2:A2:91:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl
X509v3 Authority Key Identifier:
keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.228.217.0/24
IPv6:
2606:f6c0:40::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:8f:55:eb:2c:6e:f4:02:84:b3:4b:4e:1b:77:da:8d:61:7a:
4b:33:e3:8a:62:ce:84:72:1b:e1:91:cf:be:a6:54:1c:6b:7b:
58:ed:fa:89:4a:25:fd:92:b0:c2:97:cc:aa:c5:a5:69:a9:f2:
a2:74:e0:bb:e6:ac:20:10:34:24:95:22:58:a8:c0:8a:09:1a:
91:72:52:1c:d2:6c:ce:75:86:f4:3d:af:9c:6a:64:e5:7d:e6:
1c:2e:f6:88:40:be:86:26:e2:ba:03:e0:f9:f5:a2:92:f3:8a:
18:4e:ed:c1:92:27:1f:aa:0b:1c:9b:a6:3f:b5:09:c3:12:73:
64:b5:11:cb:ec:e4:16:86:4e:66:ca:6d:87:64:6b:9f:16:0f:
b0:d5:2b:08:f7:1b:97:b6:0e:1d:b3:71:92:26:9e:a8:cd:66:
39:5e:23:6b:18:ec:3b:bf:8e:50:d1:54:af:c3:e7:b5:93:00:
3b:13:b0:b9:31:bc:c2:21:e2:fe:39:59:d2:b6:a7:9a:02:ba:
63:a9:09:41:93:67:2c:f0:2e:97:e5:a5:1b:77:58:d7:34:54:
5e:92:33:a0:73:b9:01:2e:99:fb:ce:45:a3:18:57:c9:ca:2c:
1d:05:35:0f:00:3c:a9:96:bd:27:5d:aa:9b:86:b2:bd:b2:de:
b6:25:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:39:01 2025 by rpki-client