Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b8b1e7d4-aefa-3943-be9e-5729ebd485aa.roa
File: b8b1e7d4-aefa-3943-be9e-5729ebd485aa.roa (raw, json)
Hash identifier: HBCd3q9usTH7+eNIXVBnBJcSnpXOpcT6N6ENKN1MqgE=
Subject key identifier: 02:31:A3:83:2B:BF:39:B3:52:A4:9B:50:2D:EF:60:89:D5:30:3D:FF
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584930DE7084948A2FF1061E6B00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b8b1e7d4-aefa-3943-be9e-5729ebd485aa.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 9009
IP address blocks: 207.230.112.0/24 maxlen: 24
207.230.113.0/24 maxlen: 24
207.230.117.0/24 maxlen: 24
207.230.118.0/23 maxlen: 23
207.230.124.0/24 maxlen: 24
207.230.125.0/24 maxlen: 24
207.230.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:70:84:94:8a:2f:f1:06:1e:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=76639d13-3125-4df2-be53-f41befc1d84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:47:d0:da:6a:22:92:e9:ba:72:e6:fa:08:75:
ee:38:f7:5c:5b:d5:4e:66:ed:e2:98:ba:0a:61:ca:
b7:66:b8:53:ff:9e:6d:99:dd:16:23:0e:46:92:9e:
3c:f4:cb:c0:40:08:30:2a:ca:86:01:6f:a5:ed:20:
9c:d9:91:89:ef:47:ce:03:37:ac:a6:31:81:87:ba:
d0:b9:48:6b:44:19:2f:98:9f:bb:9c:ca:29:c7:2f:
ba:7a:ee:e3:3e:d8:1d:8c:67:ea:3a:0a:9c:be:c6:
d4:92:09:06:c2:5b:48:74:a7:6b:3f:5a:08:ab:c7:
93:1f:1e:e8:53:d1:02:9e:0c:74:74:31:e8:8b:62:
3a:f9:89:7f:22:b8:49:01:99:56:df:d7:6e:f0:28:
e5:90:81:fb:f9:dd:47:3c:6f:2b:0a:68:ca:b8:10:
65:91:0e:d4:38:f1:5b:c5:b5:97:a7:f4:55:12:68:
07:42:88:96:42:e0:46:11:14:0c:aa:83:b4:ff:bb:
7e:98:d0:77:52:aa:98:a9:b3:b6:39:b8:a9:7d:32:
97:95:ae:ca:56:cd:87:40:55:a9:35:b8:0c:8d:64:
95:56:21:8f:23:0f:7e:e5:b7:62:cb:fe:df:76:4c:
19:8a:29:2b:30:e3:5e:ea:b6:40:12:ee:54:16:78:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:31:A3:83:2B:BF:39:B3:52:A4:9B:50:2D:EF:60:89:D5:30:3D:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b8b1e7d4-aefa-3943-be9e-5729ebd485aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
207.230.112.0/23
207.230.117.0-207.230.119.255
207.230.124.0-207.230.126.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:42:82:07:1c:67:ae:c2:66:37:f6:ad:6e:8e:36:91:ed:4d:
ff:e2:38:57:a7:fa:56:a1:33:40:d8:79:ad:79:fc:2c:8e:6e:
a5:6f:4e:18:e9:c7:ee:46:d4:81:ac:c4:b2:bb:4c:f7:d0:bc:
ab:f3:f8:30:3f:a4:ea:58:ca:ce:0d:e5:c4:f9:12:a8:67:b1:
93:a7:3c:26:8f:d7:95:9f:b0:07:0b:39:7f:e4:18:1d:3f:ba:
a8:ff:c3:dd:e8:45:12:a0:23:5e:fe:25:43:a1:82:d3:94:48:
84:6b:f7:a5:af:ad:a9:93:9e:60:53:78:ce:ae:3c:c2:db:ff:
39:00:0a:49:90:ea:cc:f2:29:23:e2:2b:89:ac:0c:a5:3d:43:
fa:4d:34:8a:4d:2d:df:54:5d:98:dd:d1:8d:d7:84:87:c3:d7:
88:7b:40:8c:25:a1:dc:ef:dc:be:75:78:a5:66:3d:a1:e7:c2:
e2:71:28:ec:7b:14:d3:f7:d6:9c:30:65:b8:6a:2e:f3:d4:ae:
e2:62:c5:b1:bc:d2:a4:cc:5a:28:ce:d8:1e:71:e0:01:62:73:
51:96:78:08:92:18:9f:d6:2a:a1:77:bf:ba:72:57:12:88:63:
15:29:ba:5c:86:8b:1d:f6:0e:e5:a2:18:87:b2:4f:ac:76:e5:
cf:d1:57:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:10 2025 by rpki-client