Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bc20ebb-1449-3fba-a6cf-d79e0ce33932.roa
File: 3bc20ebb-1449-3fba-a6cf-d79e0ce33932.roa (raw, json)
Hash identifier: 70IWDeLHUEFQ7bqbc5eB16b6c7OQMnlvR2G6OLOnyuk=
Subject key identifier: 9C:51:07:F2:F4:26:12:E5:17:95:4F:6D:2F:05:C1:E6:67:4F:53:A6
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848DA70F941E848A9BBAD666140
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bc20ebb-1449-3fba-a6cf-d79e0ce33932.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 7018
IP address blocks: 207.254.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f9:41:e8:48:a9:bb:ad:66:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=1280be57-b075-4265-b668-dbcf5eeabe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:74:f8:f6:eb:a6:0f:6e:cc:4b:fc:e1:05:
54:16:71:f0:d6:fc:68:d2:5a:75:c5:f7:74:13:8e:
68:66:90:39:be:c8:81:37:5e:c5:cb:43:75:dd:5f:
49:60:3b:8e:f4:d9:75:78:e3:f3:56:23:94:84:ed:
95:81:79:41:1e:d1:74:c1:1a:02:b1:53:ea:ac:26:
13:80:b6:1a:79:c0:cf:d8:0f:15:11:8c:44:c6:18:
f4:af:8a:b8:b1:58:e0:d0:3e:f6:1f:fe:80:96:a7:
18:87:a0:0d:1a:d6:35:ce:40:35:46:82:a9:fc:ec:
7f:aa:43:c9:eb:b2:2d:1b:cc:3f:db:57:5f:6d:7b:
4a:43:89:36:15:1b:e6:13:8e:24:b0:7b:68:7d:ce:
43:17:15:8a:27:0a:d8:31:c3:18:5e:c5:8a:2a:85:
ce:e6:d9:aa:de:9d:e7:74:08:21:b2:69:c6:77:f7:
4a:cf:6d:eb:a7:d6:b9:f9:7b:d9:0a:9c:00:ef:9d:
90:1e:17:64:9b:22:be:df:dc:67:14:84:fb:8e:0e:
ef:38:18:d9:3e:a9:a8:cf:7c:41:2f:2b:45:45:4e:
ee:a3:be:f4:f7:46:91:95:45:08:a0:8e:e9:d8:bc:
6d:1b:97:f5:4a:ad:be:78:00:c4:30:44:ea:08:54:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:51:07:F2:F4:26:12:E5:17:95:4F:6D:2F:05:C1:E6:67:4F:53:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3bc20ebb-1449-3fba-a6cf-d79e0ce33932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
207.254.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:a3:e2:a4:fd:b6:62:12:6d:7f:ee:cb:e0:c9:17:52:de:04:
c1:78:5c:8d:62:e6:28:d2:9b:58:9f:3b:26:a7:be:ed:25:00:
18:dd:16:a6:49:84:9e:42:39:2e:92:cc:0e:48:5d:a8:a0:9b:
70:82:bd:34:81:24:16:ea:93:9d:fb:25:a3:99:01:21:ad:e1:
94:12:b1:8c:b0:16:4b:05:83:34:aa:2d:5d:00:78:b6:31:07:
53:04:59:fb:c5:2e:a8:91:76:0e:4d:8e:bf:ec:59:c7:f0:d3:
ad:f6:eb:6d:81:05:aa:09:13:86:82:89:fd:f4:d0:d1:e5:3c:
11:f1:d9:33:a9:17:5a:e9:6f:c7:37:6c:9f:c9:cf:9b:ca:19:
19:ba:58:5f:9d:de:9c:c6:d6:b7:bd:f8:fd:2a:26:52:17:d7:
0e:0d:cf:92:be:18:d5:1d:8d:c0:96:11:fd:51:dc:20:74:7d:
41:c9:02:a0:01:5c:5d:50:52:ae:bb:ec:9d:8b:39:60:47:2e:
c7:f9:ca:16:15:fa:83:7d:ba:71:1e:c0:be:a1:d6:a6:04:e4:
89:b3:0e:2c:e6:67:60:e9:f9:79:6b:0c:35:38:bc:53:77:d0:
32:10:3b:05:dd:d7:0f:b6:62:d4:2a:10:fc:41:f9:30:9a:43:
23:0c:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:23:02 2025 by rpki-client