Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/facf20b1-99b3-3779-b7ae-f90dda37a0c5.roa
File: facf20b1-99b3-3779-b7ae-f90dda37a0c5.roa (raw, json)
Hash identifier: t5m5X3jqULzJjjcWuGgSPwgV/eKLdSJP4s682Zdj9dU=
Subject key identifier: 2B:17:94:FB:95:D9:30:0D:DF:45:6C:10:E7:E8:7C:A8:D1:0A:27:94
Certificate issuer: /CN=0c715b1a-49b0-44da-9244-0e8dcbb67b6b
Certificate serial: 010D0C9F43285849287E5F4C99B66907F94EA000
Authority key identifier: B8:26:9D:E3:23:A8:2A:C5:D8:61:48:3B:E4:60:C0:6C:D1:26:C5:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/facf20b1-99b3-3779-b7ae-f90dda37a0c5.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 16509
IP address blocks: 207.167.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:5f:4c:99:b6:69:07:f9:4e:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c715b1a-49b0-44da-9244-0e8dcbb67b6b
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=782072e1-df33-4907-8781-f166a408003a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:32:31:c0:f6:ad:e5:5c:d5:bb:0a:d9:2d:1c:
2f:3b:8b:d9:11:86:f5:6b:32:3e:dc:cb:cf:26:58:
d3:6c:11:05:fb:82:e5:9e:b2:b3:9c:79:73:d9:fe:
28:3c:10:f7:92:98:f8:3e:ed:f3:ad:e9:b7:69:39:
bf:1f:61:45:10:8a:ff:c5:e5:3f:90:5e:f9:7a:1c:
8f:70:39:1e:7b:ba:df:5d:e8:e8:80:9e:f3:fc:76:
12:45:a9:47:dc:13:ec:9e:14:56:db:02:ae:e1:c0:
82:88:aa:89:e7:5b:06:44:ee:02:a1:0a:54:88:cc:
7d:9e:0f:ff:37:17:33:68:e7:c1:d3:7c:4c:b1:3a:
b9:7c:9c:62:25:cc:b9:4f:20:67:2e:9f:cb:b7:ac:
c1:28:b6:24:11:73:56:42:39:07:ad:ff:87:0d:44:
55:2f:07:9e:a1:20:31:95:6e:49:3f:5c:fb:08:98:
5c:0e:65:92:3f:aa:e9:29:3a:44:a1:26:ea:76:ec:
fa:df:d4:54:3f:38:38:7f:6f:26:7a:9d:fa:1c:d7:
12:8b:70:dc:9b:47:db:47:c0:cd:18:f7:d2:ed:fa:
71:e6:6b:e8:f8:be:13:81:15:c5:c9:f6:c6:0f:ea:
91:82:ff:36:6a:ad:59:66:8c:9f:7b:01:da:17:79:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:17:94:FB:95:D9:30:0D:DF:45:6C:10:E7:E8:7C:A8:D1:0A:27:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/facf20b1-99b3-3779-b7ae-f90dda37a0c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.crl
X509v3 Authority Key Identifier:
keyid:B8:26:9D:E3:23:A8:2A:C5:D8:61:48:3B:E4:60:C0:6C:D1:26:C5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.cer
sbgp-ipAddrBlock: critical
IPv4:
207.167.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:b3:1c:0b:b0:47:f4:07:51:91:ab:8d:0a:99:c7:34:05:32:
14:0b:5d:47:54:16:83:4e:e6:5a:f7:6a:13:86:7c:20:8a:9d:
66:aa:bd:c0:18:25:f5:8c:9f:03:99:06:c4:c5:58:f8:5f:af:
40:5e:4f:f7:37:cb:89:d7:79:09:9e:c2:ee:f0:c7:22:e8:1d:
30:cb:75:3a:05:dd:26:85:46:4b:2d:45:25:65:5e:74:bd:03:
d6:14:f1:7b:a4:63:6b:bf:fb:54:31:1c:66:91:f3:46:ca:c1:
35:ba:e4:8b:78:cc:f5:88:f9:ae:73:cb:83:9e:f2:82:b3:56:
ed:f6:31:ec:97:25:6e:ce:c3:36:ec:25:a5:1f:51:0f:6a:03:
24:0b:b3:52:fc:ab:03:3e:fc:62:a0:7c:5e:a3:96:9e:b7:82:
31:6e:fc:8b:46:b3:b1:5f:c8:3e:af:86:61:88:18:35:29:10:
dc:48:06:ee:7e:92:1f:28:a7:ce:30:07:46:82:15:d7:3a:3f:
cc:24:c3:b4:26:0f:4a:cf:d8:56:34:5f:34:f5:cb:1a:93:89:
79:de:73:95:1e:92:4c:bd:a0:18:89:85:44:6b:b2:23:f7:c9:
fc:79:29:6b:c0:de:7d:01:ec:e0:ae:6b:40:66:3e:2e:fb:b4:
c6:fc:fa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:49 2025 by rpki-client