Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa
File: aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa (raw, json)
Hash identifier: AugXSwDFU307F7oq2HLRYT+SVbySNY7LIbFFmre/CEc=
Subject key identifier: 0A:7B:F1:88:6C:50:7D:CA:29:29:7B:13:19:34:99:CB:71:68:D4:F6
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584906E82A89FA790DC411F24840
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa
Signing time: Fri 28 Feb 2025 00:16:28 +0000
ROA not before: Fri 28 Feb 2025 00:16:28 +0000
ROA not after: Wed 28 May 2025 23:16:28 +0000
asID: 65001
IP address blocks: 24.249.215.128/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:06:e8:2a:89:fa:79:0d:c4:11:f2:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 28 00:16:28 2025 GMT
Not After : May 28 23:16:28 2025 GMT
Subject: CN=8db1ebb2-bc77-4754-90d4-bc6051e808d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:47:94:22:19:7e:23:28:1b:92:08:f4:9c:
5d:71:ab:14:a0:4d:2e:a1:20:c6:71:ae:d3:3d:e8:
3d:62:41:ed:94:84:8b:9a:a5:6d:33:48:44:3d:b5:
f0:ee:7e:17:c8:3e:db:62:21:a0:b8:c1:f2:1d:3d:
34:98:d2:02:62:36:5f:e0:aa:ad:94:bc:af:e5:ae:
ba:7d:b9:ec:1c:a7:4a:a9:e9:0c:0a:eb:09:f1:51:
29:4d:f6:11:84:27:ce:7d:c0:b8:7b:19:dc:27:76:
f3:67:6a:5c:ee:79:24:d2:80:e0:37:48:ce:6e:bb:
62:58:1c:06:ec:84:c7:d5:10:75:cb:81:c7:9b:de:
1c:df:bb:5c:23:dd:75:06:e3:06:06:57:c6:ac:8c:
83:36:bf:95:be:5e:a4:d8:cd:e2:31:38:c1:18:fb:
20:9c:19:3d:8d:d5:6d:ce:55:aa:85:c7:db:8c:24:
65:0f:98:cd:da:23:78:69:d0:d4:f3:42:58:96:cd:
1a:e2:87:5b:f1:46:37:d7:1e:f4:be:ec:bb:b7:81:
97:78:6b:1f:2f:5b:f6:21:5d:7c:9a:bf:50:da:8c:
d0:01:a8:84:fe:69:4f:59:9a:7c:a5:2b:93:0e:b4:
49:b3:be:3f:50:d1:7a:42:26:75:49:17:74:f3:0d:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7B:F1:88:6C:50:7D:CA:29:29:7B:13:19:34:99:CB:71:68:D4:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa694c7a-8fea-33ac-a569-e6f22cd6ee3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
24.249.215.128/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:2c:99:dd:4c:45:7d:aa:32:aa:46:9e:3f:46:2d:ff:21:43:
03:ab:75:e1:da:26:3a:a6:0d:c5:fe:d2:39:68:0e:8b:6c:2b:
9b:41:80:f0:6d:9f:57:76:dc:0c:80:85:83:ea:a9:9c:dd:dd:
b8:24:f2:c6:29:d6:16:9e:93:fd:65:68:8b:b4:f5:d9:e9:d4:
b0:41:fd:3e:89:e8:04:4f:e8:d8:ec:cc:55:1a:12:7b:6e:4f:
1b:fc:a2:4f:34:a4:36:f2:38:40:68:51:9d:d3:8b:7a:65:db:
c7:e8:da:44:44:49:1d:79:77:32:5f:e3:c6:3a:0e:92:10:23:
d4:5c:8c:99:0f:5b:5b:c8:3d:9b:a4:ab:b4:42:19:90:d4:43:
dc:2e:5d:fa:8f:78:c4:06:df:bc:55:12:aa:a6:92:0a:03:e7:
24:68:7c:c7:60:56:24:35:91:88:23:05:93:ef:40:78:da:bf:
6d:d2:da:03:10:ba:82:5b:ba:bd:43:9b:3c:cd:1d:09:60:52:
d8:81:bf:46:f0:e1:31:78:e9:7f:ee:c0:fc:fb:f8:d0:97:06:
d7:0b:c8:ef:be:43:12:be:87:0e:43:ec:d6:d3:37:6c:97:aa:
bd:da:fc:7b:fd:56:78:5a:c5:44:68:85:d4:c2:a8:f7:7f:88:
83:59:ba:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:26 2025 by rpki-client