Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c0271d02-e45f-3dda-8c9a-2468641ab27b.roa
File: c0271d02-e45f-3dda-8c9a-2468641ab27b.roa (raw, json)
Hash identifier: bWCQ9x01zjrUi6NkX9utJ6qBJoyOcaDzUCt8UNl3beA=
Subject key identifier: A8:18:E5:3A:31:52:5B:18:E6:A2:02:62:A2:1C:F1:31:86:33:79:DD
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285848F9267F42B592CDD34C166180
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c0271d02-e45f-3dda-8c9a-2468641ab27b.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 11426
IP address blocks: 158.115.236.0/23 maxlen: 23
158.115.238.0/23 maxlen: 23
207.230.100.0/23 maxlen: 23
207.230.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:7f:42:b5:92:cd:d3:4c:16:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=225513bf-14c5-480e-9b62-969770d1dac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:f9:37:ee:e6:be:b2:59:34:43:f6:d9:95:
2b:f2:ca:41:9c:45:98:e5:9b:ae:3a:2b:34:ac:e1:
bc:ba:ca:8c:3c:01:2e:17:e2:78:08:be:63:36:2b:
04:05:06:62:0b:c1:b1:32:4d:64:0d:13:1d:78:45:
14:b8:c5:33:af:57:7e:73:e1:9a:05:a1:94:45:47:
fb:27:85:c4:60:b7:06:4d:c8:e9:1c:25:07:59:0f:
ef:8c:5f:54:57:54:71:70:75:98:f3:7a:b2:fe:ec:
78:81:a6:f4:a7:06:64:66:71:8f:6c:2f:cb:ba:9b:
5e:2c:e5:96:cb:50:00:4a:34:32:b3:aa:10:25:bb:
8b:b4:16:cd:5c:9a:92:de:2b:7c:42:b7:d8:78:23:
da:f9:04:11:d4:71:60:ce:65:88:fe:71:69:68:13:
c7:89:4e:06:ee:f6:83:1c:c3:41:d4:ee:50:4f:b0:
0f:ee:09:88:81:74:6f:27:03:81:9c:34:d5:63:dd:
a5:b8:54:06:80:19:5a:cc:c0:7c:a5:23:1e:2b:27:
b8:23:17:c7:a8:f5:04:d1:80:57:e1:60:0d:e4:e1:
51:72:92:38:2b:60:a3:3c:40:c1:07:60:fe:79:5f:
8a:02:ac:bd:0e:15:85:6d:4f:15:43:dd:ba:79:c3:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:18:E5:3A:31:52:5B:18:E6:A2:02:62:A2:1C:F1:31:86:33:79:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c0271d02-e45f-3dda-8c9a-2468641ab27b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
158.115.236.0/22
207.230.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:80:aa:de:cd:31:9a:08:d0:7b:75:d3:cd:27:c6:6c:93:0b:
e0:0e:39:7b:44:7f:7e:02:af:f5:e5:df:a9:f7:ec:14:de:9c:
09:fe:d0:aa:98:6b:3f:be:d7:43:12:af:38:30:1b:06:14:ef:
b0:cc:7a:b3:c4:bf:14:01:cc:7f:7a:6a:d3:12:be:97:90:bf:
85:9c:de:fb:c0:a9:ff:10:c1:57:94:9b:5f:79:39:74:45:84:
bb:45:f3:0f:b1:2c:f4:e7:cf:53:be:33:45:a8:f2:d3:e4:b0:
1f:6f:71:d0:f9:ec:3b:f0:8c:67:62:6a:d5:99:9b:f8:0a:b0:
41:e0:dd:8f:82:77:56:54:c7:96:cf:e5:27:8b:99:72:74:bb:
fa:d9:42:0e:4f:18:76:0e:ae:2d:8e:9e:04:09:cd:1f:e4:aa:
6a:8d:41:6a:43:f5:c7:2b:cc:a5:9a:72:65:0e:6b:de:fa:de:
42:ff:eb:e7:56:79:f7:1c:80:38:d5:11:50:81:de:09:5b:41:
b7:fe:c6:07:a9:7c:0a:10:b1:43:6d:42:f0:8a:85:69:88:1f:
1f:e6:17:33:5e:6b:23:a8:6b:5d:62:33:09:94:03:44:78:dd:
4e:38:f5:de:3c:50:9a:c8:42:67:bb:11:87:1b:20:2a:86:f7:
72:7b:ec:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:08 2025 by rpki-client