Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa
File: 646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa (raw, json)
Hash identifier: W8O5BI6JyY5Vz7qTl1THtIRJH8ZQ2/iu3HX2jxuruj8=
Subject key identifier: 43:DE:1C:0A:8B:B7:69:E3:C2:BA:FB:E7:B7:4B:24:2B:78:D3:84:47
Certificate issuer: /CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
Certificate serial: 010D0C9F432858489A3B487392A57D079C0A4300
Authority key identifier: E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 13649
IP address blocks: 205.207.186.0/24 maxlen: 24
2602:fa4d::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:48:73:92:a5:7d:07:9c:0a:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=09856876-d199-4c0d-b132-a112081b69e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:91:78:11:7f:99:36:1c:db:c0:53:6f:4f:
7a:7e:dd:0e:26:a5:1d:19:3f:0e:ba:1d:45:8f:93:
03:8e:dd:aa:5f:95:67:86:5e:8c:ff:25:ec:08:35:
fe:62:2e:3e:42:b4:3a:1a:9c:af:09:2b:35:3a:13:
8b:7b:97:ff:0e:66:f8:0c:fa:65:27:4b:3c:30:91:
50:f2:8c:e1:09:38:a5:d6:c1:9d:6b:7c:45:7e:cd:
a7:6b:d2:bb:e8:17:9a:2d:91:b1:61:8a:27:8e:55:
7d:02:cd:b3:4f:ee:8c:20:79:a2:8f:14:97:39:17:
75:1e:d5:b4:25:ca:be:7b:3f:7a:b9:02:59:f0:bd:
0a:c3:ed:31:72:39:a5:b4:36:c1:af:c7:9d:2b:5f:
d2:1f:ac:02:3f:66:e6:10:39:69:66:4d:f7:77:6d:
0f:d3:c3:be:56:24:6e:68:56:0c:ec:ec:33:e9:74:
dd:c6:fa:13:32:85:27:54:72:7f:ca:28:51:f7:b7:
d0:31:25:8a:9a:f9:4c:0c:aa:a6:a8:9c:de:dd:ee:
02:63:54:af:81:3c:7b:9f:03:6d:69:a9:b7:2a:fa:
95:0b:b9:4d:4c:ca:62:78:1c:e5:4e:9a:28:a3:4e:
1e:95:2a:73:72:f9:63:ca:76:0d:c7:e4:ff:be:70:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DE:1C:0A:8B:B7:69:E3:C2:BA:FB:E7:B7:4B:24:2B:78:D3:84:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl
X509v3 Authority Key Identifier:
keyid:E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
sbgp-ipAddrBlock: critical
IPv4:
205.207.186.0/24
IPv6:
2602:fa4d::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:88:50:16:6d:cc:2a:2a:e3:bb:04:50:38:18:d2:c8:22:2a:
22:53:ad:d4:10:9a:11:79:5b:3d:15:23:6d:9c:08:71:6c:73:
ea:3a:71:ff:02:31:0d:21:b0:1d:77:73:5e:05:2c:8f:2f:30:
ad:eb:23:9b:55:b8:be:1f:5b:17:b7:31:5a:c2:85:fc:02:4e:
02:09:8d:42:73:f1:a0:0c:dc:ed:f7:1e:cb:f4:68:7f:b3:ff:
a3:e0:d6:33:5d:5a:57:94:72:e4:19:e3:4f:5d:2a:d1:0f:b6:
e3:29:22:9e:f2:50:ae:d0:c4:77:61:1a:22:2a:15:1f:02:92:
bf:41:24:2b:3d:15:f1:3d:37:63:56:6c:43:2e:93:32:d7:7b:
3e:b1:d2:f8:df:4f:05:b2:ff:07:87:00:de:cd:08:4e:3e:fe:
6e:4f:36:5c:4d:ca:19:c6:cc:0b:ef:be:b4:d4:d7:78:ef:74:
91:0b:d8:c9:49:76:53:ef:74:ad:7c:cc:c5:c4:df:00:71:b8:
ef:62:d5:88:55:4c:78:b5:84:75:d9:cb:74:4b:61:18:79:01:
ab:4d:66:ba:d1:56:39:53:33:5c:e0:0d:25:68:b3:a2:71:c6:
14:0e:3d:21:cf:72:b1:9c:99:01:5d:56:35:fb:58:3e:8a:9e:
03:03:b8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:44 2025 by rpki-client