Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f5b47b0d-b1e3-32b0-a1be-eec7ff16e9f5.roa
File: f5b47b0d-b1e3-32b0-a1be-eec7ff16e9f5.roa (raw, json)
Hash identifier: OmSdJVT18A95WYJ3THC/Qxvh1+b1YewbodgmFdRzRAU=
Subject key identifier: EE:FE:12:4A:67:E7:94:F9:E2:49:02:00:D8:B9:C8:91:E4:8D:F4:96
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858487CEB3B8B7B1AF81184224640
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f5b47b0d-b1e3-32b0-a1be-eec7ff16e9f5.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 393249
IP address blocks: 206.87.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:3b:8b:7b:1a:f8:11:84:22:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=45f8d587-15fe-4219-bf0c-7490a75fae46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:d7:77:2d:c7:ce:59:5f:4d:4c:0d:e8:12:
30:ca:e2:2b:be:2c:f5:51:b6:1c:e8:43:33:b7:e2:
07:96:16:5d:fb:18:3c:c2:c5:a4:b1:85:2f:96:8c:
df:62:a9:af:64:cd:fa:a8:7b:d2:cb:bf:73:f6:ef:
9b:7a:62:0e:3c:47:c5:44:8f:a0:4a:2b:da:19:ff:
e4:ec:77:5c:b1:5c:14:c9:fd:9f:22:e8:33:2b:14:
02:6e:46:ca:f0:96:5c:d9:cb:6e:a0:6c:47:39:29:
c2:16:a9:00:50:3c:25:cc:d0:58:3f:9b:94:4d:22:
9b:59:4b:2f:04:d0:cb:e5:89:95:70:d1:af:ab:3b:
a8:59:e0:38:e8:e4:fb:70:d1:e4:73:2d:05:34:38:
84:de:75:88:b8:a1:09:b1:bd:3b:fe:55:be:56:2f:
f5:09:38:d3:2b:09:8c:41:f5:78:ce:85:2c:18:90:
b8:b5:05:25:5d:e8:c8:af:30:7c:07:75:25:49:30:
41:1d:2c:ab:ee:8e:3b:be:fe:74:c2:32:d7:a4:4e:
21:74:85:f2:cc:3f:22:5d:47:08:26:2c:58:ab:f3:
12:55:26:70:a2:3f:93:3a:27:d7:27:85:b6:93:10:
97:39:8a:d1:b3:0f:3c:d0:54:63:00:c2:4e:a8:0a:
10:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FE:12:4A:67:E7:94:F9:E2:49:02:00:D8:B9:C8:91:E4:8D:F4:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f5b47b0d-b1e3-32b0-a1be-eec7ff16e9f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
206.87.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:52:af:33:be:c8:9c:a0:30:0c:b3:a1:e5:0f:00:7b:4e:08:
6c:35:86:d2:e2:8a:4d:10:8c:58:06:c2:9d:06:ba:62:76:7d:
07:84:1b:5c:f0:23:c3:cc:34:5e:f6:62:8b:49:8e:15:af:45:
de:69:26:93:88:08:7d:86:b5:68:41:c7:6b:27:8d:a3:ea:6f:
4e:fc:f4:b3:ab:19:1f:74:5a:3d:4c:e0:fd:6a:6f:3b:13:db:
b2:e3:7c:26:5c:29:b5:55:9d:8d:44:14:0e:49:a1:70:cb:06:
1a:b6:96:fb:07:f8:aa:e2:0f:8e:a1:4d:48:4c:05:f1:fa:db:
d0:d4:28:9c:77:3f:fa:ea:b5:eb:c6:22:71:f1:d0:b9:b5:0d:
ab:fe:07:7d:82:dd:b8:04:de:43:2a:b9:28:a7:6e:12:f3:28:
42:75:ae:f3:9e:e5:da:45:b7:de:c3:87:30:3a:6b:98:35:6d:
7b:38:a1:72:f2:3f:08:08:3a:e5:b9:e4:94:c0:47:45:13:c7:
fb:d2:c9:06:76:64:4f:86:71:2e:a5:e1:10:d0:a5:03:5e:d3:
9d:d6:b7:c0:f6:fa:71:ac:94:dc:6d:37:f0:06:a3:83:32:1e:
98:65:ea:8e:29:a6:dd:18:36:65:3d:94:4d:34:7f:ee:7f:02:
24:64:d1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:43 2025 by rpki-client