Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa
File: ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa (raw, json)
Hash identifier: ID3eFi2ZDFCrxg33m01dW92R/tvIROQq8pbyzXN0R7w=
Subject key identifier: 54:E2:9E:9B:74:FF:89:8E:1D:D6:EA:77:D0:6C:15:4F:81:DA:82:90
Certificate issuer: /CN=654e0ef8-ac77-456b-9a63-98fdb228488b
Certificate serial: 010D0C9F43285849244E67AD1163E46D59602940
Authority key identifier: 20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 400404
IP address blocks: 66.71.208.0/21 maxlen: 24
96.45.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:67:ad:11:63:e4:6d:59:60:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654e0ef8-ac77-456b-9a63-98fdb228488b
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=2a091450-2ce1-4c27-8a0c-f2ce8faa6b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:16:b6:fa:7c:57:e1:75:f7:4e:46:02:23:
97:21:9f:e3:13:cb:b4:14:6a:ff:7f:94:41:60:e2:
e6:49:18:3a:90:f0:6c:bc:a6:90:c0:00:56:68:b6:
59:73:67:1b:bb:f6:75:82:42:c2:be:27:43:b1:58:
df:02:d2:8c:3e:e2:dc:2e:69:56:30:8f:88:33:da:
bb:4c:70:e4:be:65:6f:66:3a:04:74:04:39:67:d5:
d6:e1:30:b9:d4:9d:27:17:b0:47:ee:dd:a2:ba:55:
77:39:b6:61:9e:37:bf:c4:ab:5c:9e:22:c1:65:53:
f5:1c:1f:94:50:fb:14:d6:f7:4b:c8:02:77:2c:9b:
39:cd:93:43:b5:e5:8f:58:8a:26:87:87:eb:6a:10:
00:be:89:93:15:c4:2e:fe:1c:d3:b1:ea:75:f0:3d:
00:a4:d9:37:61:d1:a6:3b:00:05:c4:99:72:d5:a4:
a1:ac:d5:f3:6b:17:20:fd:0e:b4:5e:e1:5e:6b:84:
90:67:2f:e5:5b:45:b1:e1:a0:ff:d7:6b:bb:00:64:
e5:fa:a0:92:b2:b4:d1:af:c0:f2:fc:47:ee:5f:d9:
22:a0:e6:29:f9:80:66:98:5d:76:f4:a4:c2:55:7b:
40:2a:7b:ed:60:89:2f:8b:b7:95:d1:4c:78:4c:0f:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E2:9E:9B:74:FF:89:8E:1D:D6:EA:77:D0:6C:15:4F:81:DA:82:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl
X509v3 Authority Key Identifier:
keyid:20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer
sbgp-ipAddrBlock: critical
IPv4:
66.71.208.0/21
96.45.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:f9:df:29:c7:11:1c:8f:d1:76:13:32:b2:89:2c:61:27:8a:
e5:61:f9:3b:3b:61:55:5a:60:87:0e:ab:56:cf:3a:99:a0:4f:
ea:43:cf:57:e9:e3:c4:f7:ca:39:02:d6:eb:f5:f7:cf:56:a3:
0a:50:c5:29:8c:fd:2e:65:45:06:ff:59:f6:15:88:c0:1f:0b:
ea:f8:a8:61:86:e5:19:1d:44:99:f2:08:21:ed:4a:8a:55:62:
f5:ab:85:a3:36:17:de:33:27:68:a5:19:1a:ad:23:5d:3a:f8:
d0:f3:00:fb:f1:f1:68:eb:96:42:11:c7:fe:5c:1a:bf:bf:17:
52:1d:e8:4f:f4:b9:09:4a:b3:7b:98:dc:88:0d:94:dd:aa:7e:
f6:a1:1d:e7:02:d8:7c:ac:da:a0:72:f1:89:a6:07:67:84:4b:
e3:a7:41:39:fa:a3:02:2d:86:b5:a8:cd:06:cb:48:72:9b:e0:
bb:03:ec:a1:f4:7c:e7:8d:60:77:e6:46:07:c4:2a:87:f8:81:
98:24:bc:63:a6:89:ab:6b:c5:7a:b3:78:d0:f5:21:24:03:0f:
98:3f:d3:b5:2d:db:21:0e:7d:aa:14:fb:18:c3:f1:5c:53:d0:
36:26:ae:a5:62:0b:db:f8:23:6a:b9:7f:96:c2:15:f8:67:78:
d4:6e:bf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:30 2025 by rpki-client