Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/27d6fce4-3560-3856-9614-274232fb6eef.roa
File: 27d6fce4-3560-3856-9614-274232fb6eef.roa (raw, json)
Hash identifier: 8rx1Kg0997ptjSMNgPxRGzmPgP9O70Mo//I8LCpEE/I=
Subject key identifier: 87:72:FC:90:D4:B8:0E:AA:67:E8:D7:60:DD:E7:C4:35:C3:60:F9:58
Certificate issuer: /CN=f8c8c076-f01a-4032-b27d-2c8117227f2a
Certificate serial: 010D0C9F43285848EF6145CC03A511EF8F18B400
Authority key identifier: E2:F9:A8:6F:E7:F0:F9:B7:71:AC:2E:54:9D:CF:7F:B8:39:81:77:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/27d6fce4-3560-3856-9614-274232fb6eef.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 209242
IP address blocks: 216.120.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:45:cc:03:a5:11:ef:8f:18:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c8c076-f01a-4032-b27d-2c8117227f2a
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=4a4be32a-e552-4c90-82a0-4b94676675ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:25:45:6d:ee:dc:0f:9d:22:75:0d:69:f0:99:
65:07:0f:8d:fe:a8:a6:97:1c:09:c4:d2:74:06:2f:
ed:81:1f:4b:0f:80:d8:27:31:08:0d:93:66:58:c0:
be:52:a4:84:ff:ef:3d:eb:94:48:35:d6:30:ef:a8:
d6:52:4a:77:87:26:98:dc:9a:73:db:13:cd:88:b0:
72:b6:86:47:4a:c2:9f:1f:f6:7b:bc:ff:de:f6:02:
5f:4e:2f:48:38:78:e9:43:26:86:e6:a3:08:32:4f:
60:d1:27:93:e4:19:65:7a:4e:e0:b1:d0:fb:26:42:
dd:2f:c8:cf:17:a0:61:b7:7f:cb:36:19:08:48:f9:
bd:13:bb:15:43:48:6e:1c:54:24:69:6e:32:a3:7e:
aa:89:bf:13:94:8c:17:b6:15:94:8f:91:a5:c9:bc:
7e:04:dc:12:57:fc:c7:ff:96:d4:38:83:6a:36:bb:
68:3f:c6:53:9e:75:f1:ef:2b:fd:88:4f:79:7d:4b:
3e:31:ef:cd:9a:c2:39:ca:be:18:98:c8:28:7d:15:
53:d9:b7:9c:96:11:d3:07:f6:01:7f:e9:da:bc:53:
af:84:b0:08:76:38:0a:c9:b1:29:83:63:48:8b:68:
9c:68:55:7c:98:4e:38:37:df:23:a7:38:bf:30:09:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:72:FC:90:D4:B8:0E:AA:67:E8:D7:60:DD:E7:C4:35:C3:60:F9:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/27d6fce4-3560-3856-9614-274232fb6eef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/f8c8c076-f01a-4032-b27d-2c8117227f2a.crl
X509v3 Authority Key Identifier:
keyid:E2:F9:A8:6F:E7:F0:F9:B7:71:AC:2E:54:9D:CF:7F:B8:39:81:77:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.120.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:bf:1c:28:6a:ad:0a:31:0c:3d:57:ca:3d:a4:c2:79:4a:14:
88:85:79:66:89:33:89:f7:4d:9b:64:d5:68:48:cd:08:61:d3:
98:2a:94:de:fe:82:1c:72:f0:43:c6:5f:a8:58:be:18:c6:c6:
51:f2:a9:e9:e0:97:64:ac:84:70:e9:73:a9:d8:99:75:82:8c:
ca:c6:2d:5e:7e:6e:9b:9e:f9:3b:81:11:7a:c7:b2:5f:10:07:
01:ee:a4:ab:b0:11:e3:dd:42:86:01:45:48:f7:9d:66:02:67:
c8:d7:12:f0:5f:d1:b5:32:2a:ed:93:61:43:1a:61:ab:57:ad:
b5:ef:e8:f5:c9:b5:92:32:ee:c0:18:4f:9c:02:04:52:e6:ba:
e7:0d:a8:f9:9c:25:d6:42:bc:db:5c:0e:49:ab:90:b3:25:74:
93:c2:ba:47:08:ec:7d:e8:08:77:dd:9e:6e:13:7c:bc:68:16:
d7:da:33:86:f4:b9:82:87:b2:b5:fe:37:d3:ea:e0:4c:84:60:
64:1b:ea:5e:3a:0f:6c:d8:ce:14:eb:0e:56:9b:99:c3:01:1c:
6d:ce:de:d8:c1:95:ce:f0:f3:8d:6c:7a:1b:42:6b:7a:61:57:
c4:03:16:c5:3b:d1:c7:5b:1c:03:71:89:00:4b:ac:63:b2:a4:
da:49:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:57:03 2025 by rpki-client