Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/dfb478b5-3a17-3167-84b3-41255fbe2de0.roa
File: dfb478b5-3a17-3167-84b3-41255fbe2de0.roa (raw, json)
Hash identifier: aZ9Pcr7pVbbgCzzm4FKU+1nluurR0v0o0xxASgcIj/0=
Subject key identifier: 2C:1E:44:09:88:63:22:58:A6:83:64:47:45:7F:77:E1:27:7F:2B:EB
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848911AE9EE91F99A2F75C71BB0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/dfb478b5-3a17-3167-84b3-41255fbe2de0.roa
Signing time: Thu 16 Jan 2025 19:33:20 +0000
ROA not before: Thu 16 Jan 2025 19:33:20 +0000
ROA not after: Wed 16 Apr 2025 18:33:20 +0000
asID: 30336
IP address blocks: 207.96.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:1a:e9:ee:91:f9:9a:2f:75:c7:1b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 16 19:33:20 2025 GMT
Not After : Apr 16 18:33:20 2025 GMT
Subject: CN=a5ac9cb6-0fc0-465b-afc9-81d3e347aed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3c:2e:95:57:09:e0:75:73:44:58:75:4d:6b:
14:0a:3e:e6:46:2b:4a:4f:b6:9c:5f:d8:9a:a1:e6:
71:ce:e9:a4:df:36:a6:a1:ec:c1:f4:ba:86:6f:8f:
1d:d3:f2:5b:5a:27:af:82:87:62:32:c9:42:41:89:
77:3b:e6:c4:a9:ec:d7:8c:d3:c1:65:67:58:60:85:
3b:01:00:d2:57:53:f5:be:a6:b4:77:47:d3:b5:01:
ec:88:3c:ce:6c:9f:5e:1c:5d:62:6c:c3:f7:96:2e:
a3:74:40:cc:96:41:c9:0c:c3:a5:b1:0d:1e:40:45:
d4:89:cd:9c:64:6e:79:d6:83:f1:b8:34:26:e0:6c:
7d:25:e7:19:1c:91:b2:8d:2d:5e:71:61:58:91:7d:
d8:4e:af:76:56:9d:2f:dd:58:07:fd:64:10:e5:6f:
71:db:b7:76:86:27:30:ed:24:2d:3b:68:e4:b5:76:
26:8f:20:db:21:db:c9:de:e1:c4:a8:b6:10:bb:1c:
ba:d1:c3:8f:1d:cd:ba:5e:fb:41:99:af:33:b2:5f:
b1:f9:03:f6:30:23:dc:48:a5:73:70:44:62:5d:62:
9e:1c:33:1b:89:17:9e:80:ae:7d:8a:be:3f:13:c8:
a8:b3:8e:49:95:48:04:09:0f:83:7b:70:53:d8:ff:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1E:44:09:88:63:22:58:A6:83:64:47:45:7F:77:E1:27:7F:2B:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/dfb478b5-3a17-3167-84b3-41255fbe2de0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.96.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:44:f6:bf:5a:64:30:6a:2c:97:4e:a5:a3:10:d2:c4:cb:3b:
8a:95:0f:b1:b5:68:21:ae:a5:94:30:a5:9a:ba:e8:6b:c8:bb:
5f:c3:95:21:6b:bf:43:f4:d4:90:46:15:f4:ad:74:84:3d:1f:
f0:50:40:38:5d:9c:70:d3:b7:44:ca:10:c2:57:7c:a6:eb:a2:
3a:54:00:7c:c2:34:fa:58:43:18:e0:57:75:e1:5e:99:ef:15:
0e:10:50:14:e9:aa:19:0e:cc:d7:c5:df:be:7b:10:5f:7e:1f:
5a:3d:74:0f:17:46:f2:5e:af:14:80:c2:3d:69:38:f1:e5:49:
a6:21:1d:7e:1e:9f:2d:b9:7f:c2:dc:44:de:90:88:bd:f4:dd:
a3:54:20:22:f9:74:27:6c:d2:12:66:0b:31:da:d5:15:14:fc:
e3:b1:88:3e:6a:24:e8:d0:30:bc:ea:68:24:e4:db:d0:eb:93:
2f:5e:c5:64:30:3e:61:16:65:2f:2b:d8:06:7b:14:b3:e2:38:
fb:1c:85:fa:e3:5f:51:8a:6b:d3:6e:4a:b4:47:41:ce:7d:b7:
ef:c5:f9:1d:fb:01:8a:eb:f0:f2:ef:07:ba:11:9e:d7:5a:71:
51:cd:3f:63:1c:2d:0b:d5:0a:d8:7f:8c:82:cf:79:d3:ac:9e:
ef:54:62:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:37 2025 by rpki-client