Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ff80e1a8-1841-36ce-8708-dcfd0d348438.roa
File: ff80e1a8-1841-36ce-8708-dcfd0d348438.roa (raw, json)
Hash identifier: gScuEmwBY7sNqIpi2nCBdC0giNEZ+o5DrPVG7b7YpF0=
Subject key identifier: F1:20:E5:D9:89:84:4D:C4:73:C7:BD:62:2D:2A:9C:F1:94:C0:ED:3C
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848A16A54D149A40FCB2A35EF78
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ff80e1a8-1841-36ce-8708-dcfd0d348438.roa
Signing time: Wed 22 Jan 2025 15:46:17 +0000
ROA not before: Wed 22 Jan 2025 15:46:17 +0000
ROA not after: Tue 22 Apr 2025 14:46:17 +0000
asID: 395075
IP address blocks: 207.253.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:6a:54:d1:49:a4:0f:cb:2a:35:ef:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 22 15:46:17 2025 GMT
Not After : Apr 22 14:46:17 2025 GMT
Subject: CN=ce943cba-e177-48b3-b4d2-947e80cde40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:db:74:57:b0:8f:7a:b3:f1:35:ee:a1:41:
14:49:3d:2e:47:7f:e0:a9:97:da:f5:29:39:ed:d6:
3b:57:18:f3:42:38:71:b4:39:c3:2e:f7:46:2f:0f:
15:38:7e:a7:1a:59:b6:e7:0f:1f:29:f3:4c:de:7d:
32:04:b6:6d:1c:03:62:ee:d0:f4:a1:81:af:dd:e9:
e6:1b:71:8a:15:fe:b2:0b:fa:ed:41:1f:83:5b:d7:
f5:ef:b3:af:b8:dd:18:a0:fc:e6:fd:99:17:35:8e:
1a:49:ab:02:83:86:ef:f0:a3:88:79:5f:19:98:35:
a6:78:f4:03:ab:74:85:b9:8e:71:4d:13:8d:b5:e5:
dd:cd:f6:77:95:a3:e1:5e:bb:0f:86:76:c4:49:0d:
16:89:45:65:66:2e:7b:a2:46:92:a3:08:c3:0c:04:
67:c4:e0:df:1f:a7:d5:cd:23:b2:2d:3e:97:63:d0:
b9:0c:b1:e7:59:09:48:e3:cc:b4:b9:d9:58:c7:14:
64:02:64:64:20:66:5f:4d:e4:3f:a4:8b:74:0a:43:
44:cc:21:29:ab:9d:4d:9a:3f:e6:ed:14:ce:84:4d:
63:a0:4c:45:c3:eb:d4:63:a1:f9:87:26:88:65:e5:
82:cd:35:4a:e0:b4:1c:44:a1:e0:83:94:0f:a3:ef:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:E5:D9:89:84:4D:C4:73:C7:BD:62:2D:2A:9C:F1:94:C0:ED:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ff80e1a8-1841-36ce-8708-dcfd0d348438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.253.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:f1:08:7b:15:aa:0b:64:65:f2:cf:c5:e0:3d:1f:3f:2d:f0:
32:df:09:af:f7:ab:9c:ea:4a:9b:c8:48:4d:c9:f6:98:9a:28:
ea:6c:12:d6:8a:1f:d1:aa:e4:a8:ea:0d:b5:5e:1b:00:f9:ab:
e0:2c:3f:d7:53:87:64:14:a4:b6:2f:7f:aa:3c:42:e5:2d:5e:
48:aa:df:cf:6d:db:6f:42:68:c0:ef:53:74:2a:5f:bd:51:73:
e0:04:58:15:89:06:59:ab:d9:8b:2a:05:16:55:68:29:0a:7e:
bb:d8:4d:a1:63:cb:70:2b:61:d9:cf:28:22:c5:32:23:1b:3a:
d4:e0:d5:c6:78:ba:e3:46:12:69:48:7a:c0:9c:d1:3c:02:1e:
13:8f:3f:49:70:6e:99:24:0f:84:9f:30:de:55:3c:94:30:16:
d5:40:ec:4f:fd:20:35:29:4a:3c:5b:4b:13:d8:cf:e5:ec:63:
85:ed:86:f4:39:18:53:85:d7:57:69:b8:d1:23:be:a7:57:26:
86:88:a5:87:6a:12:00:34:1f:c4:39:0f:57:2d:85:1f:07:2b:
75:78:65:03:c2:7d:1c:52:f2:2f:39:58:67:02:c2:58:72:f3:
76:72:67:53:72:13:f9:f2:7a:67:24:34:b6:a6:fe:f4:01:31:
a1:23:8b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:28 2025 by rpki-client