Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/d25efee7-3b27-3dbb-96b6-b8da5dbd85b9.roa
File: d25efee7-3b27-3dbb-96b6-b8da5dbd85b9.roa (raw, json)
Hash identifier: JBlFlxDRTByLlwY7gpAqim7Q4dljccWydzll0ykX0h8=
Subject key identifier: 88:95:C5:D8:6D:6A:72:F8:B1:B4:6E:22:F0:CB:46:86:2B:D3:03:B5
Certificate issuer: /CN=cfb7a881-7ab4-481b-a9b2-22789676f960
Certificate serial: 010D0C9F4328584908815B0335AAAFEC89717C80
Authority key identifier: B7:21:90:FE:DB:D8:52:17:6E:25:F9:54:EA:E3:92:79:33:1A:95:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/d25efee7-3b27-3dbb-96b6-b8da5dbd85b9.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 398395
IP address blocks: 67.219.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:5b:03:35:aa:af:ec:89:71:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb7a881-7ab4-481b-a9b2-22789676f960
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=f04b4267-907f-4b66-b06b-f0ab07a511d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:a2:7c:86:03:e6:0c:bc:f0:0e:4f:8b:25:
1e:a7:c3:4e:fb:e6:c7:a5:92:27:ac:5e:34:f1:8f:
19:a5:a3:61:9d:b3:6f:f0:61:59:f1:62:be:10:bc:
de:f1:46:b6:17:75:e0:36:f1:5a:e7:46:db:b8:59:
30:c4:53:d3:c6:d3:55:9d:d5:1a:3c:16:c3:80:1a:
cd:bc:79:9d:89:13:ab:7a:10:c5:52:a9:67:e9:7b:
31:47:df:59:48:fa:fc:ca:ca:5d:f7:a2:cd:4c:f4:
07:58:54:14:ec:58:82:93:27:23:ab:7e:70:16:19:
01:70:e0:46:0e:ea:3a:ea:9c:a6:d2:55:78:b8:f5:
c7:8d:55:73:18:1e:8a:55:2d:35:1d:ba:1a:5a:64:
fa:fb:51:f2:a0:ee:c0:77:68:9e:7c:00:d7:cd:b3:
ef:c9:6e:3f:0f:68:e9:15:3e:80:09:50:75:02:45:
c1:f9:74:0c:a6:fe:5b:b2:dc:08:87:ec:8d:d7:0d:
e9:d9:e1:b9:24:2b:58:d0:a6:b0:01:e7:d7:dc:ac:
e3:b3:08:3a:70:13:49:61:7c:d3:67:95:f0:5c:5e:
54:db:c8:65:ce:0a:60:66:e9:07:8f:0c:94:a7:b0:
c2:d8:dd:33:07:d7:e9:35:be:3f:b9:b5:28:6e:c5:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:95:C5:D8:6D:6A:72:F8:B1:B4:6E:22:F0:CB:46:86:2B:D3:03:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/d25efee7-3b27-3dbb-96b6-b8da5dbd85b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/cfb7a881-7ab4-481b-a9b2-22789676f960.crl
X509v3 Authority Key Identifier:
keyid:B7:21:90:FE:DB:D8:52:17:6E:25:F9:54:EA:E3:92:79:33:1A:95:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960.cer
sbgp-ipAddrBlock: critical
IPv4:
67.219.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:58:bd:cb:8b:c8:9e:29:9a:ed:40:5f:f4:b0:a2:c2:6a:9f:
af:d1:bf:8b:ef:96:1e:f1:10:f0:cb:0c:b0:81:03:f5:67:0d:
51:f6:0a:75:d4:07:27:6f:d3:1d:d5:84:d4:f6:18:80:d1:18:
23:0e:ea:06:4f:ea:b5:fe:b1:c9:c6:19:16:c5:9d:5a:e6:c5:
a4:a0:17:8d:a9:c2:57:8b:ab:30:bb:6c:fb:9f:05:0b:6f:6e:
f6:64:bd:20:74:da:50:5a:77:a6:07:c2:b3:81:04:a9:cb:22:
41:a6:bd:c9:19:96:3f:cc:0a:b3:95:de:e5:b4:9e:12:ef:c9:
8b:45:38:b0:27:91:c4:0c:09:35:a6:6c:67:84:82:69:b6:5e:
67:c1:e7:e1:20:e5:cc:f2:f7:9d:10:8e:8c:c2:35:e4:54:80:
a2:02:78:60:e4:9b:0d:84:4b:58:5f:40:87:de:0f:4f:0b:8c:
1b:14:68:b9:a1:c4:0f:0d:23:9d:8b:c8:bb:26:4e:ba:e1:d4:
83:a4:b3:45:b6:77:2f:56:fb:25:04:3d:20:4d:09:a2:1e:ee:
49:6d:2b:fa:d2:86:0c:56:92:65:2d:92:af:92:8b:b2:6e:56:
43:15:4f:29:78:66:74:e6:b5:4d:ea:2d:d2:1f:04:7e:d0:ee:
1e:cc:f5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:39:02 2025 by rpki-client