Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/32b1db2c-23d3-3a7f-ac40-7aa3e040f09a.roa
File: 32b1db2c-23d3-3a7f-ac40-7aa3e040f09a.roa (raw, json)
Hash identifier: JbUUxq+C7g0E9YmofbTo8460NTQDHRtlZ/JCkzC7zSg=
Subject key identifier: D8:1D:7C:2E:BC:BF:5B:84:DC:25:6B:E7:58:AA:BF:F7:55:E4:B8:49
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858494303F226C74EA987BB6F8C20
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/32b1db2c-23d3-3a7f-ac40-7aa3e040f09a.roa
Signing time: Fri 21 Mar 2025 13:00:50 +0000
ROA not before: Fri 21 Mar 2025 13:00:50 +0000
ROA not after: Thu 19 Jun 2025 13:00:50 +0000
asID: 271
IP address blocks: 206.12.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:03:f2:26:c7:4e:a9:87:bb:6f:8c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Mar 21 13:00:50 2025 GMT
Not After : Jun 19 13:00:50 2025 GMT
Subject: CN=571df5bd-3ec8-4544-baa5-d4d6f4e96968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:cd:56:1a:d8:ea:37:d4:92:78:4b:cc:61:
af:df:d7:31:44:a7:35:7d:2f:55:5c:18:ee:7f:b4:
dd:1b:b7:de:27:04:5d:e8:f7:e5:7e:ff:d0:70:d2:
41:d5:51:5a:05:50:6b:bc:30:9a:ed:85:b8:ac:38:
b0:af:a3:d8:52:33:b8:85:c2:e9:36:74:9d:8c:d5:
a0:35:1c:7e:a9:56:a0:81:85:d2:12:f5:6f:c3:9b:
1b:25:0a:cc:f5:ac:2a:f2:f8:6f:24:e0:d5:b4:06:
59:dd:f2:82:d7:b0:f9:d2:e2:78:4e:d3:01:f9:aa:
3b:3d:70:5b:b9:f8:55:89:32:89:cd:41:8f:41:01:
34:22:38:52:ca:ef:73:67:fa:cd:88:67:5c:9a:c0:
06:0b:ab:0a:b6:2c:b1:44:51:4a:0e:06:c4:b4:f8:
a5:03:47:4d:17:d4:4e:d0:b7:d6:e4:6e:45:46:a9:
7b:bc:bc:d0:a8:63:4a:b4:61:ad:98:4a:02:49:0f:
1a:b1:7d:f2:7a:18:74:5d:f3:8b:60:6d:d0:f8:b3:
7c:94:fc:dd:ea:41:ef:2a:60:7f:d0:1b:1f:7a:b1:
51:f3:8a:92:02:90:0a:2e:da:3a:7c:f2:9c:39:78:
e6:bc:63:e3:ef:5d:f2:64:8c:04:8e:cb:7b:19:8a:
b5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1D:7C:2E:BC:BF:5B:84:DC:25:6B:E7:58:AA:BF:F7:55:E4:B8:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/32b1db2c-23d3-3a7f-ac40-7aa3e040f09a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
206.12.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:18:f4:fc:08:cd:a4:10:1f:6f:07:d5:60:5d:0c:1a:4a:b4:
1f:a6:42:77:3d:1f:60:72:13:6f:cb:e2:c4:2e:b7:28:5b:63:
1e:e2:3b:87:2c:6d:18:0b:07:9a:a0:87:22:06:d4:70:72:96:
88:f4:7e:55:55:28:7c:d8:a2:8e:1f:b5:da:59:a7:06:7d:e9:
a5:7c:f4:7b:6f:cd:c4:81:97:28:78:42:9c:6a:59:6c:8f:59:
fe:90:42:fb:9e:70:7d:d2:ea:d5:53:13:18:86:0c:eb:19:c7:
e9:0c:32:a0:93:42:82:3d:5c:13:78:8e:cc:c3:94:52:da:1d:
7a:b0:30:80:22:85:c8:2d:6d:be:8d:f8:38:96:84:cc:13:ab:
8e:67:7b:6b:ef:02:05:20:0c:48:4c:fc:e3:3a:ec:d7:73:ec:
39:fd:6a:66:c3:c7:a7:06:af:e0:64:fa:45:70:92:94:5a:b7:
e9:4a:d7:0d:27:53:78:ae:4e:a0:04:bc:07:14:31:e5:d5:f3:
6d:c9:89:4e:29:5b:f9:bf:29:fe:63:37:97:54:9f:76:71:ad:
78:1d:b1:f7:11:bb:a2:a0:13:bc:af:37:e6:78:4b:64:c0:5f:
c8:37:a9:26:bf:f6:e1:86:5f:1a:92:e3:a8:0f:6e:ef:a2:7b:
09:e3:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:41 2025 by rpki-client