Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa
File: aa000e23-1120-334a-ad1d-5bf8f562f368.roa (raw, json)
Hash identifier: 1oiOz2WWlh7TiJ7Wliv80TELKEhufuMJuyBYoXuCNEg=
Subject key identifier: 8B:07:C5:D9:0F:9C:44:78:6F:5D:95:9F:11:42:6B:82:D9:24:89:EB
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848ADC60F141A28DE0619BE8D70
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 21723
IP address blocks: 207.194.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:0f:14:1a:28:de:06:19:be:8d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=626e5c16-668a-408d-b80d-75262c4639eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:72:42:f3:f9:33:1d:c3:ad:a9:ae:e9:1b:
cf:04:00:19:b6:4b:d0:c3:fa:77:71:e4:5c:69:52:
80:92:e0:fb:14:5d:bf:fd:f7:a3:fa:bd:98:1b:94:
36:d3:e0:37:e5:43:94:53:da:2a:4e:b9:5f:46:78:
91:48:f6:8c:98:87:bd:99:bd:0f:3c:a4:63:89:3e:
a8:2a:26:3c:a3:8a:40:65:7c:0b:d7:98:b3:95:39:
3a:bf:f9:7e:56:98:13:e0:ac:7d:6c:41:64:53:4b:
b5:58:a9:7c:26:42:ad:b2:7c:9c:ae:a8:66:ea:70:
83:e6:cb:d2:72:12:ae:8e:4f:56:1f:81:d4:9b:c5:
26:23:44:61:ed:ba:b7:68:42:53:22:f9:26:2a:bc:
c7:5e:78:1e:2d:88:31:c3:8f:d6:2d:b9:c3:6b:09:
7c:cd:f2:23:f5:bb:3a:a3:b6:92:c1:43:8e:6d:14:
85:30:99:d5:2f:42:3d:93:c4:f1:53:10:a2:25:33:
b9:10:74:3b:7d:d4:77:36:13:74:64:86:63:45:c9:
5b:6f:29:bb:ab:7b:29:e7:e0:cd:0d:af:1d:aa:78:
dd:a0:73:2b:90:94:50:20:f8:60:30:bf:e3:f6:e0:
32:a7:91:d2:5e:fd:a5:e4:8d:40:55:58:85:4d:b8:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:07:C5:D9:0F:9C:44:78:6F:5D:95:9F:11:42:6B:82:D9:24:89:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
207.194.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:dd:53:51:f8:c5:cd:32:39:6b:fc:38:71:41:42:c8:48:f1:
2f:7b:94:cc:1c:50:e6:6b:80:cc:d0:55:a9:49:73:46:da:02:
5e:df:ac:b0:2e:c5:95:11:9b:5e:6a:d8:38:7a:ff:be:a7:57:
53:d5:ad:a8:a3:97:b0:17:4e:b0:09:35:80:58:db:f8:47:1f:
07:e9:f0:91:88:eb:cb:a9:06:a9:cd:21:b4:4c:65:ca:81:b3:
65:56:fb:76:36:d9:44:6d:11:ec:3e:01:e5:b9:6a:80:32:86:
e5:58:e8:ce:b0:af:c5:cc:4f:a0:9a:2d:03:0f:e1:85:43:a1:
87:3a:56:cc:cb:39:6d:97:8e:6a:ee:82:66:3f:31:2a:57:23:
27:b3:c6:1a:8c:ac:1e:44:05:23:56:52:cd:98:9f:6d:33:67:
a4:0c:fb:46:79:06:8d:d4:d8:11:d4:a4:3a:50:12:6e:d0:27:
13:ff:d7:71:bf:2e:54:95:de:19:7f:42:c7:4c:03:2f:60:31:
41:af:25:c0:51:f2:da:56:79:1f:e2:f6:c1:b0:5c:14:6e:cd:
6c:10:11:05:5f:1a:f5:c6:e6:ca:12:d4:72:c6:98:01:19:39:
88:f8:78:95:34:d0:d7:54:db:b5:87:50:ef:5f:b6:89:28:c4:
f7:9c:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:13:54 2025 by rpki-client