Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/0980eda2-f7c6-3992-b0e9-51015caefe8d.roa
File: 0980eda2-f7c6-3992-b0e9-51015caefe8d.roa (raw, json)
Hash identifier: HaK+890Kl95Il0j0zM4grt4vhbis54QS/3rei1l9zPg=
Subject key identifier: B7:10:0E:72:D9:F5:68:6F:E0:4F:D3:E4:2E:3F:29:94:7F:A3:B9:98
Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial: 010D0C9F43285848E16BE9B0F6745F5509391700
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/0980eda2-f7c6-3992-b0e9-51015caefe8d.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 33211
IP address blocks: 206.41.119.0/24 maxlen: 24
206.41.120.0/24 maxlen: 24
206.41.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:e9:b0:f6:74:5f:55:09:39:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=8ed0063a-43fc-4f36-a468-c46e3a9036a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:f8:b0:b3:40:23:2c:55:0b:ef:7e:40:4a:
26:b1:a4:6e:94:85:a9:47:1b:48:ab:99:33:73:bf:
93:e5:71:b5:d8:1a:03:18:96:ea:5a:10:eb:4f:20:
be:31:25:b5:2d:e9:ad:07:e2:2d:1d:01:70:c2:58:
bb:5f:5c:e3:fa:a1:32:e9:5a:ef:d3:d0:5a:f9:c3:
b7:2c:99:f3:65:fa:5f:20:d2:0a:c6:f1:e5:3b:9f:
19:00:b3:66:6c:9b:d1:5c:17:05:c6:1c:61:2f:99:
c3:e6:15:b1:2b:59:68:02:6e:a4:d9:d3:eb:ad:55:
9c:ce:29:5f:1f:b4:d6:c1:e9:5c:64:61:9f:ee:de:
5b:54:b1:dc:b8:19:db:ac:e6:76:07:ae:67:ce:1a:
fb:a2:72:9f:03:22:cb:51:ff:1a:b2:72:b4:66:6d:
b2:13:a4:f1:d5:10:01:0f:94:11:28:f3:b1:16:b3:
4a:e3:fe:76:51:a0:77:d4:be:0f:55:1a:49:7c:25:
71:48:38:be:37:de:c4:5c:b6:45:90:97:a7:e3:d2:
eb:b6:9a:6a:0a:c3:e3:45:1d:22:53:a4:32:fd:c7:
ca:c8:49:26:a7:a7:a8:4c:97:70:43:04:bb:c9:6e:
96:77:08:e8:90:96:c9:c9:c3:ae:47:a4:75:50:07:
01:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:0E:72:D9:F5:68:6F:E0:4F:D3:E4:2E:3F:29:94:7F:A3:B9:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/0980eda2-f7c6-3992-b0e9-51015caefe8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
X509v3 Authority Key Identifier:
keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.119.0-206.41.121.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:c1:55:6f:94:0f:52:ac:ab:45:99:2c:de:7f:08:8a:9e:9e:
74:2f:fb:48:3a:f1:fb:2e:4f:f3:8f:f9:3d:32:b2:f9:83:3c:
2e:ec:7a:f4:b5:20:98:a2:e2:5f:43:9d:46:50:22:27:50:d5:
64:56:9a:37:c2:0d:c5:b3:c5:a6:10:09:97:06:0f:d2:c8:dd:
60:df:35:94:dc:cf:9f:68:7a:1c:74:8d:5c:ce:c7:71:a8:b4:
9c:7b:6b:cd:8c:36:f8:46:b9:b1:66:3b:e8:4a:37:28:ed:ba:
d7:68:1f:e7:23:13:d3:78:ec:2f:66:97:b4:8f:aa:7a:22:96:
21:2c:51:28:f0:1b:d2:9c:71:8f:ee:0e:df:a0:95:90:0f:c4:
69:8d:d1:3b:b0:ef:2a:84:f9:31:6a:ff:73:0b:93:16:d2:3a:
5c:13:a7:2a:4e:8d:bb:9f:0a:af:88:1e:df:3d:e1:14:e2:b6:
00:fb:a3:a1:d2:7f:a8:4f:24:1e:13:89:a6:8a:31:cf:5c:2c:
d1:9b:13:d8:ac:52:44:e9:a7:61:1a:ec:d8:bb:30:d6:8c:0e:
b7:97:6e:41:5f:68:6a:d4:71:56:7b:e9:2b:cf:11:2a:df:52:
0e:ed:cb:64:93:bf:cf:6a:39:0a:e5:43:15:af:38:05:ba:8b:
2b:26:22:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:37:49 2025 by rpki-client