Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa
File: 5fa6e3d9-d618-3d95-9a11-af6760164377.roa (raw, json)
Hash identifier: BCkALL0Pli246Gdo6gmLfXTqOPnRfq/jOhou5gMNGCc=
Subject key identifier: 64:80:7B:29:D4:93:DC:6A:CA:C1:64:65:70:65:41:F5:F0:49:C1:3B
Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Certificate serial: 010D0C9F432858480EA5137F1FB7A7566DABA1A0
Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 400790
IP address blocks: 207.228.219.0/24 maxlen: 24
2606:f6c0:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:13:7f:1f:b7:a7:56:6d:ab:a1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=1923703d-0784-45b2-8b8c-d6ba551d6968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:b4:a2:da:29:9a:21:72:be:3e:27:9d:6d:
3f:12:b0:59:b5:60:e4:34:f4:4a:05:e0:65:ab:6f:
0d:4f:d7:a4:c7:47:81:9c:6f:e1:ae:0e:53:b3:cb:
31:31:c9:18:e6:83:5b:57:96:ad:ad:a9:38:9f:50:
ba:1e:5b:38:14:b7:d7:ac:e1:6e:a5:8d:59:9d:31:
0e:4d:1e:1e:c1:39:8b:36:a1:b4:52:98:b6:64:aa:
2a:00:66:43:78:46:9e:a8:d4:af:6b:62:86:c1:51:
14:09:72:99:18:da:fd:f2:7a:eb:8a:85:52:cc:b4:
ee:69:cd:4f:99:40:29:e1:34:23:d1:58:7a:39:0f:
7d:e0:8d:97:fa:c0:cd:16:f1:a1:13:75:30:58:77:
f1:a0:01:94:74:de:2f:fa:27:7f:3e:ea:40:47:26:
df:21:b3:43:7c:7e:16:94:e7:15:c6:c3:f5:f9:6e:
30:ea:ce:85:19:68:0e:83:b0:6f:f7:31:e3:eb:9e:
60:da:f9:90:55:ac:03:10:6e:d7:58:08:ac:c0:97:
71:a5:7a:c8:4f:cf:7c:a3:bc:7b:75:28:f1:62:da:
9f:34:fc:53:75:db:f5:92:d9:a1:ef:0c:80:0a:ae:
28:0b:f3:a5:29:ff:85:2f:da:ea:87:38:dc:5b:14:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:80:7B:29:D4:93:DC:6A:CA:C1:64:65:70:65:41:F5:F0:49:C1:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl
X509v3 Authority Key Identifier:
keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.228.219.0/24
IPv6:
2606:f6c0:100::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:ed:db:b6:77:29:02:3e:52:81:8a:24:56:61:4f:b2:3b:60:
94:c5:9e:38:6e:cf:dc:96:b3:94:b7:d1:32:00:80:88:2c:e2:
a9:f2:e3:9e:da:f6:82:b3:04:90:34:19:4f:60:f7:08:df:65:
c1:de:a5:2f:8e:da:a9:ac:de:66:78:ac:68:0b:76:86:b6:00:
b8:49:dc:06:10:7c:d9:b7:d1:22:27:51:7d:1f:5a:82:7a:40:
cb:6b:dd:cb:11:54:70:53:b0:dd:89:19:5b:7f:29:1f:71:e8:
d5:37:e2:aa:be:0d:7d:b5:57:18:ed:dd:6c:79:9e:a7:86:48:
d9:aa:83:1e:d5:ee:88:dd:6b:c4:fa:e2:73:b9:f3:38:54:37:
25:40:77:f7:a2:cb:07:ab:92:1c:3e:2c:45:85:cc:a7:4d:d4:
c2:73:3b:03:da:41:90:27:e8:3e:27:00:8c:e3:ce:e3:97:cf:
8b:48:f1:d1:01:f7:f7:3d:03:7d:55:82:85:5b:0f:82:57:c2:
b8:11:e2:d4:19:6a:32:87:78:32:6b:d4:d2:69:86:cf:2e:a8:
8d:d5:4d:7f:e0:bb:55:86:56:a7:9e:4d:dc:2d:b8:85:d0:ba:
08:5e:12:7f:e1:75:6a:f6:bb:a3:2c:80:46:7a:83:07:cc:25:
ac:ed:ab:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:25 2025 by rpki-client