Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/827c54fe-31f4-31ad-be9e-681a6da02eec.roa
File: 827c54fe-31f4-31ad-be9e-681a6da02eec.roa (raw, json)
Hash identifier: C9TCiuEWjN20Tm2diwymcHyIT4rL0JsJpmSWBhgAzgk=
Subject key identifier: 23:9B:1A:6C:85:D7:4A:A0:7F:5F:2F:29:C7:4C:19:C8:3E:AE:99:CA
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F69D94771125D757F51700
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/827c54fe-31f4-31ad-be9e-681a6da02eec.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 8560
IP address blocks: 66.179.208.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9d:94:77:11:25:d7:57:f5:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=38bdf828-8cec-48a2-9bbc-e85cb9e5e8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:c1:2e:97:66:62:02:39:30:45:2a:ae:8e:
95:f8:9c:34:88:f8:68:d8:21:3c:c6:5a:58:d1:aa:
22:04:40:0d:66:f7:df:8d:3c:73:65:d9:2a:fe:1b:
c8:d6:9a:5e:51:89:15:02:0c:6c:ab:03:2b:dc:67:
1b:9e:52:28:a4:4c:d0:7a:7d:33:ac:f7:12:58:50:
47:2a:7b:7b:98:45:33:30:9c:a4:2b:63:57:47:62:
6f:4b:08:9c:dd:ba:ae:41:ec:b3:37:e2:d1:91:c0:
02:87:1a:7b:bd:08:de:58:0d:9a:23:c4:52:ac:95:
0d:4c:35:97:9a:c9:3d:cb:b3:ed:c9:0a:9d:ae:b2:
43:f0:05:3d:3c:fd:25:ef:14:27:09:b2:bd:84:ad:
75:53:99:0d:56:dc:a6:ec:2f:06:0a:de:e5:e1:3b:
a4:82:56:ac:b1:fd:37:4b:17:cd:66:27:44:d8:7a:
4d:04:48:65:18:f6:6b:05:d0:e1:d0:b9:4c:93:a5:
76:3a:57:3d:80:ea:98:84:ce:d0:9f:a4:4a:c6:1d:
91:ee:e3:6f:35:b7:c4:52:c3:62:e7:86:10:bc:b7:
d6:2f:98:c5:e6:a6:18:12:29:2a:58:7e:c2:dd:b0:
e0:40:62:51:de:75:3a:93:fb:81:56:d1:d6:dd:d5:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9B:1A:6C:85:D7:4A:A0:7F:5F:2F:29:C7:4C:19:C8:3E:AE:99:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/827c54fe-31f4-31ad-be9e-681a6da02eec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
66.179.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
de:dc:d2:28:bb:6c:97:3a:b9:0b:41:45:c1:da:40:96:f3:81:
0e:82:ed:ab:d3:1f:0e:b0:14:90:23:f4:78:84:55:3b:09:1f:
b3:dd:72:b3:96:80:8b:97:70:eb:44:3e:d1:b2:a3:42:5a:3e:
50:34:c1:74:b3:c4:54:00:aa:7e:15:f3:8a:a5:e3:fb:56:f2:
ba:4a:76:06:65:d1:38:e0:93:d9:3f:3e:a4:ed:3e:c8:17:41:
22:2d:13:bb:69:6c:97:a6:f7:5b:a4:22:a9:20:4f:02:e7:cf:
de:e2:aa:25:37:4e:6a:32:82:4f:8f:47:1b:7a:f3:53:f8:63:
eb:40:33:e2:b6:1e:b7:42:3a:3a:e8:7d:a7:04:c2:b0:41:93:
96:37:4c:8f:b6:c5:8c:c1:31:10:8f:6c:75:88:58:87:d0:bb:
2b:5a:84:ac:95:fd:a0:e9:74:a6:7a:eb:e9:a2:26:9b:3d:bd:
5e:b7:b5:c0:e0:38:8d:f8:29:93:73:f0:8d:ed:4d:3d:ae:8a:
30:58:4e:5d:62:17:03:e8:81:b6:8b:df:aa:5c:71:f5:85:a3:
41:63:be:c6:9d:26:e7:56:3e:ed:3a:b0:0a:c0:c2:41:bb:3f:
0d:64:45:82:85:5d:dd:ed:b1:8e:7c:bc:8a:11:36:1c:66:dd:
53:1e:b9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:37:11 2025 by rpki-client