Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/67505067-b175-3e55-83cd-81aeb5b4bbc1.roa
File: 67505067-b175-3e55-83cd-81aeb5b4bbc1.roa (raw, json)
Hash identifier: cHwjw7mGPL9WYx0GC4FdpHeMsWWYNO5jnWrykX1kO2o=
Subject key identifier: 90:B4:F1:E5:48:EE:40:7B:19:AE:23:01:D5:5B:D7:1D:03:2B:90:BD
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F4328584908816F54B0E6596F0F405300
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/67505067-b175-3e55-83cd-81aeb5b4bbc1.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 3356
IP address blocks: 67.215.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:6f:54:b0:e6:59:6f:0f:40:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=e7ce739a-b5d9-4b4e-a762-4a63e01e9c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:90:77:95:b3:db:15:f5:68:f2:5e:c6:a2:
9d:ab:1b:48:48:3a:a1:48:d0:7c:dc:92:2b:19:34:
03:c4:80:ff:da:9e:1a:2b:c4:a5:28:96:dd:d6:4b:
ad:36:c2:49:39:49:c3:15:ac:16:92:e5:30:d1:f0:
4f:40:bb:36:c3:98:37:2b:bc:ef:41:c8:be:a6:08:
10:0d:bb:67:5b:75:69:21:b1:cc:cc:4d:77:c3:66:
ed:0b:63:a9:59:56:f2:eb:6a:d5:6a:e2:54:6d:98:
96:aa:f2:06:11:2b:a0:b7:9c:cc:b4:a7:53:e1:22:
db:a5:65:f4:a4:c4:26:ff:b5:ff:13:3b:d9:8d:bf:
4c:75:b1:e7:e8:62:4f:c7:4a:11:72:76:54:1b:c6:
52:c7:16:8d:99:f1:c5:0a:45:b8:70:71:a8:88:45:
ed:60:ca:94:a7:84:57:20:b7:29:64:cc:f9:9c:fa:
67:25:cc:af:35:d5:8c:35:ef:61:17:46:7c:df:9a:
7d:73:d3:20:40:4f:93:98:30:9d:f6:48:bb:1e:bc:
8c:de:ec:16:c1:ee:2c:6e:59:3d:63:b4:e4:18:9c:
83:41:98:7e:ce:fe:4b:2a:9b:9d:12:2a:42:b2:18:
1a:11:7d:a5:1b:18:f4:cb:6c:6b:ac:85:37:26:ab:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B4:F1:E5:48:EE:40:7B:19:AE:23:01:D5:5B:D7:1D:03:2B:90:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/67505067-b175-3e55-83cd-81aeb5b4bbc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv4:
67.215.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:5c:c6:da:66:74:cf:ef:b4:4f:e4:27:49:69:50:5a:d7:e2:
ec:0d:77:e8:d9:53:a1:98:29:20:0c:5d:46:ac:3d:31:7e:98:
9a:56:05:25:36:6c:db:53:f5:b0:9e:5c:ad:a0:cc:a4:87:38:
1d:06:fe:21:76:03:26:77:b6:09:fb:d8:a4:39:f3:82:1a:75:
ff:66:2b:04:8f:0f:73:24:67:67:b8:b9:f6:6c:2c:fa:c6:31:
f9:75:dd:64:8c:9e:b1:c3:87:c8:98:4f:c2:dc:42:89:45:30:
1e:1e:af:42:e5:52:5e:16:77:8b:cc:49:eb:80:1c:db:e0:2c:
db:51:e0:46:0b:fb:a9:b6:2b:0a:9d:12:0f:af:b2:c2:e8:53:
fc:d1:fc:64:d5:a0:ab:64:47:6a:99:71:bc:8f:f3:15:93:0a:
03:cd:76:91:db:e2:7a:a8:eb:50:da:d9:74:85:0d:7c:a6:fc:
41:d9:e7:56:4f:c8:f9:c5:02:d4:62:0f:65:a9:cc:80:ea:8b:
59:73:30:0d:cc:54:1a:99:43:15:77:f3:00:aa:33:45:62:3c:
3c:1f:ee:f5:10:4b:2d:2a:4a:5a:e9:a2:a3:1b:b8:2d:81:eb:
d6:57:c6:5a:1f:6e:f3:e0:b1:d0:ff:41:80:91:d7:ed:25:5a:
62:38:b0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:30 2025 by rpki-client