Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b1af58df-7943-3424-ae8c-c8c1c17cc735.roa
File: b1af58df-7943-3424-ae8c-c8c1c17cc735.roa (raw, json)
Hash identifier: VQ1TkNfMRKyxQwT/msJa4HR9wAKlBolPgzjUmIYXbNk=
Subject key identifier: CD:01:5C:8A:19:03:C0:9A:E1:E6:F1:AE:1E:A8:38:A6:B3:62:72:6B
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858489075FA50D9B3584AE7919380
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b1af58df-7943-3424-ae8c-c8c1c17cc735.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 16462
IP address blocks: 206.12.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:fa:50:d9:b3:58:4a:e7:91:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=6ae4d302-fe10-493f-99be-a1f3b074bfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b4:96:f9:86:44:7f:61:3b:ac:25:05:48:34:
6b:c1:78:fe:b5:91:87:bc:bc:9d:92:ea:02:d5:1f:
22:2f:c7:70:1d:c0:f0:48:46:0e:d5:2f:d8:ee:0f:
76:05:0f:d8:d2:0d:12:12:ad:9a:e0:bc:2f:5b:7c:
5b:37:93:29:15:a1:0c:02:a5:82:88:dc:2a:20:fe:
6b:41:3f:bb:d5:f1:fb:47:ef:91:89:00:bd:aa:92:
79:2a:6e:fa:5a:ff:1b:bc:18:29:1f:db:e9:37:bd:
ca:8d:70:e2:e6:18:d8:2d:88:7f:bf:1b:8c:3e:3f:
72:3f:1d:28:4d:70:28:4e:c1:59:e3:1f:a1:e0:d7:
20:53:11:e8:4d:e0:7f:1c:97:a3:7f:39:fb:83:86:
3e:83:3c:b1:e0:b1:7e:77:19:1b:b7:51:c3:dc:9f:
eb:81:71:80:e3:2b:e9:96:29:18:70:cf:64:5a:eb:
7a:0e:20:90:75:87:f7:44:26:49:b9:2b:99:f8:65:
d8:ca:8c:ed:96:25:b2:fc:47:e9:97:f8:bd:58:fb:
4f:44:3d:d9:25:97:8a:11:b4:e7:78:29:7e:c6:29:
d3:59:13:c5:56:76:e4:12:8e:55:a7:11:42:8c:86:
e6:2f:3c:2f:2c:e5:8f:1d:80:08:52:b6:0c:66:2a:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:01:5C:8A:19:03:C0:9A:E1:E6:F1:AE:1E:A8:38:A6:B3:62:72:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b1af58df-7943-3424-ae8c-c8c1c17cc735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
206.12.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:73:2c:0c:a8:7a:50:9e:39:8f:aa:ab:17:a6:55:42:cb:41:
16:cb:1b:ff:45:f6:5d:60:c5:8e:25:f3:3f:68:36:ca:f9:c2:
41:79:b4:27:5c:9c:de:c1:6c:24:ba:1d:d6:1f:86:99:15:a6:
72:88:4c:0f:aa:c1:7b:3b:a8:e5:d7:e5:3c:d4:15:a7:90:f9:
aa:57:48:01:5d:ce:c0:94:ad:c6:3a:90:5d:61:30:51:eb:e5:
68:a3:7e:64:e4:d8:72:66:e2:d7:02:30:75:1d:42:a3:66:7b:
ea:04:d1:d3:f1:75:ba:bd:22:68:7c:e8:34:e5:c0:82:56:86:
6f:73:63:d1:ae:5c:e2:d3:e1:d3:48:95:ce:9f:97:56:d6:60:
4b:b8:76:8d:9d:fe:75:7b:c5:ef:74:36:b0:47:2e:a3:64:cb:
ea:e0:b9:a9:1e:5e:7d:d6:75:3f:fb:5a:d5:31:3e:5f:e8:ac:
a1:cc:65:4f:2b:b8:4b:b3:b4:68:76:d9:f0:f8:10:d6:e6:2f:
6d:66:7b:a8:53:30:03:3e:50:a8:ad:76:2b:c6:4a:44:75:8d:
0f:c5:a1:81:d6:a4:53:ba:88:fd:0e:9b:f6:14:50:d5:ad:eb:
08:08:e2:2c:71:a1:ec:57:7c:11:59:e2:00:da:72:d0:76:c1:
9f:56:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:50:53 2025 by rpki-client