Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d0d7641f-1b45-3648-bbf9-4e02129371b5.roa
File: d0d7641f-1b45-3648-bbf9-4e02129371b5.roa (raw, json)
Hash identifier: XpXgKPK2CGnOX2L4kY/ypDcpEgEn+UFhP8riVdnHvZQ=
Subject key identifier: 91:5D:33:46:B5:18:AA:AA:D9:FB:4A:34:32:E9:F5:75:36:01:CF:91
Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial: 010D0C9F4328584953C41B6591B78379DEEEDD4C
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d0d7641f-1b45-3648-bbf9-4e02129371b5.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 23470
IP address blocks: 206.221.176.0/24 maxlen: 24
206.221.177.0/24 maxlen: 24
206.221.178.0/24 maxlen: 24
206.221.179.0/24 maxlen: 24
206.221.180.0/24 maxlen: 24
206.221.181.0/24 maxlen: 24
206.221.182.0/24 maxlen: 24
206.221.183.0/24 maxlen: 24
206.221.184.0/24 maxlen: 24
206.221.185.0/24 maxlen: 24
206.221.186.0/24 maxlen: 24
206.221.187.0/24 maxlen: 24
206.221.188.0/24 maxlen: 24
206.221.189.0/24 maxlen: 24
206.221.190.0/24 maxlen: 24
206.221.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:1b:65:91:b7:83:79:de:ee:dd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=daf2458a-16a4-4e1d-992e-0f92eff8ac74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:25:7d:48:3a:6e:55:50:e7:11:f0:87:c6:
b4:e8:de:19:8e:4b:c6:d8:c0:6f:8f:0c:63:1d:67:
b7:42:b4:79:c1:a8:42:17:6b:64:63:28:be:34:24:
a2:45:f0:c5:ef:68:74:5c:15:16:f6:af:5c:bd:ab:
34:f9:fe:b4:95:e3:07:9f:7d:3d:e9:0f:33:81:d4:
cc:ab:e2:53:88:0d:68:e4:d5:e0:20:f2:03:1b:c3:
31:a3:8d:db:08:cb:1f:d1:bf:3a:0f:cb:02:22:73:
fb:ae:91:e6:bd:a7:1c:fe:07:57:49:ec:e7:f6:b3:
b1:8e:b4:ab:fd:98:3f:16:50:57:a3:dc:b8:7c:ac:
76:71:3f:cc:50:4b:7f:b2:9f:54:10:0d:c0:21:28:
d9:70:ab:45:0e:49:8f:9a:8a:d8:7f:01:67:ea:80:
d5:09:c0:eb:53:e8:6d:a1:e6:07:e0:14:57:ea:77:
98:d1:30:c1:10:c2:50:b8:94:e4:1f:bc:e3:d5:d6:
48:ee:32:f9:11:8f:4b:c4:45:6a:50:1e:a4:4d:c7:
22:b8:aa:24:ef:e0:64:cf:13:ca:58:91:b5:77:7b:
46:41:d7:53:ba:b7:f9:00:c7:62:fe:25:40:94:22:
0c:3b:76:af:c7:14:65:0b:67:23:97:e5:fa:01:c5:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5D:33:46:B5:18:AA:AA:D9:FB:4A:34:32:E9:F5:75:36:01:CF:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d0d7641f-1b45-3648-bbf9-4e02129371b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
X509v3 Authority Key Identifier:
keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
sbgp-ipAddrBlock: critical
IPv4:
206.221.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:43:4d:e9:43:14:a0:cf:e3:e5:56:b6:f3:a4:fc:18:f8:fb:
65:ec:ea:27:55:b2:11:7d:3b:f3:62:34:54:9f:6d:17:1d:35:
66:07:e5:de:72:3b:b2:80:66:d5:b2:4d:4e:78:0c:ed:b9:66:
7a:87:ba:44:2e:ea:b4:ba:c3:3a:50:ba:ee:a5:83:27:a0:23:
b8:f3:45:bc:0c:17:77:96:e2:6e:f5:51:c6:30:7d:2f:c5:a9:
fa:01:c3:37:69:b2:e5:d5:47:1e:71:5b:bb:4c:22:3b:9f:60:
5f:f8:5d:c3:80:d6:56:de:33:82:8b:c1:13:f9:82:f0:07:31:
13:c0:d7:6e:e9:fd:dc:12:26:3a:9b:4a:30:5a:43:45:fb:f6:
a2:5a:58:3b:19:df:d0:4f:89:f7:03:c9:d9:40:73:04:29:51:
67:04:35:58:c7:ae:12:ab:b6:7b:2c:3b:08:90:56:35:5f:c2:
75:52:a4:92:af:41:5f:0b:ac:c5:4d:39:14:44:13:15:e8:25:
f9:ee:80:fb:2c:e4:71:fc:92:7c:d1:a9:5a:dc:f7:9e:4b:67:
76:16:4e:f6:8c:25:2f:0a:e2:72:5d:32:85:48:40:22:0f:6c:
36:32:9a:ad:86:ac:8b:fd:78:be:0a:ac:94:4a:b6:f1:27:e5:
89:5c:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:54:12 2025 by rpki-client