Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa
File: cff704e6-6037-3379-841b-631795dec5ac.roa (raw, json)
Hash identifier: 4casYM123/D6INvsjUkgZaOLIQslfO+EBdhGXBCpO4Y=
Subject key identifier: 02:BC:67:3A:0F:79:D1:00:F5:2B:8A:73:87:FA:DC:32:EC:E2:13:E9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848CDE1190DE80580731B515E80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7029
IP address blocks: 67.140.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:19:0d:e8:05:80:73:1b:51:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=a6450207-1acb-4a5d-8112-afad68c25b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:ab:1b:16:92:b1:d7:bb:4b:8e:5a:00:91:
b6:eb:8b:f9:1f:c4:6b:94:6e:aa:39:59:f8:a6:40:
11:71:35:d5:8b:90:8b:a4:f2:52:b6:5b:c2:25:bd:
91:f1:64:4a:e0:1d:7d:16:c5:ae:50:75:6f:cc:46:
49:7a:d8:9d:2f:bc:c7:50:e3:d5:ba:9b:e8:b4:c8:
b8:cc:80:22:0a:d0:20:6b:2b:23:91:51:0e:8d:13:
59:54:e1:a9:6d:6c:9a:fd:34:ed:23:7d:e1:c6:9a:
f7:82:59:47:fd:73:e6:59:f9:17:ab:05:70:85:e5:
e1:d9:86:5b:1f:ec:66:72:24:4f:67:90:ae:97:d8:
a3:47:dc:88:c3:e7:d5:44:9f:78:2f:bd:58:6b:c8:
3a:69:34:78:68:2e:3c:89:86:10:a1:15:18:8c:7b:
20:80:06:49:03:42:d0:bd:67:28:f8:ab:1e:d6:29:
03:cb:99:1f:b8:d2:de:d6:f5:6e:97:e9:56:68:33:
a1:7f:f6:29:82:11:b0:04:20:86:18:e9:9c:bf:88:
5b:d2:ae:6d:92:23:e9:15:92:9a:23:b8:38:8d:c2:
39:ca:fc:37:21:a4:f9:e6:68:ea:09:30:53:66:6b:
ae:6e:03:e8:82:cc:96:eb:b7:fd:5a:2b:5f:8b:d4:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BC:67:3A:0F:79:D1:00:F5:2B:8A:73:87:FA:DC:32:EC:E2:13:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.140.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:fb:df:08:52:b8:b4:41:65:db:bd:d1:25:dd:c9:07:50:86:
c8:7b:8e:3a:78:0b:2a:ae:68:5c:c1:10:0a:ab:6a:53:94:00:
ab:02:51:85:fa:dc:34:c4:35:cb:d6:b5:b9:76:47:f7:70:f2:
24:21:ce:27:22:e3:77:6e:f9:4d:79:0d:16:c0:18:d6:2a:dc:
e5:2a:ce:c5:46:be:e1:4f:7c:d6:cc:0f:93:4a:fe:2d:c7:58:
63:03:ef:36:81:be:bf:85:02:62:a1:3b:a9:af:98:79:f4:ed:
fc:93:d6:09:18:c5:cd:3c:53:6a:21:48:7f:12:bf:86:71:b9:
1d:45:a6:47:22:1b:d7:af:2b:bd:8e:ed:c9:41:ca:e8:d2:e6:
0d:43:15:8e:9a:3f:b2:6f:88:1b:95:84:a7:d2:d8:73:89:2d:
86:75:32:1f:2f:44:13:aa:65:a7:6b:27:87:cf:83:69:83:31:
30:2d:a3:f1:5c:dd:0f:d8:01:bc:25:62:e8:52:62:d7:97:60:
91:da:89:b4:ad:18:b2:b9:6f:05:98:ee:4a:ee:15:f3:a9:25:
75:92:ab:9e:65:4b:28:44:68:f4:e3:0d:48:0d:eb:0c:81:6d:
a7:08:93:50:1e:e0:44:71:8e:21:25:7e:f3:77:7b:8d:86:3e:
ea:d6:4c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:24:06 2025 by rpki-client