Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/03fd2f73-270a-3fae-aad5-2aa15608021a.roa
File: 03fd2f73-270a-3fae-aad5-2aa15608021a.roa (raw, json)
Hash identifier: nda6xcapmwIElQdSKRjrvTRgpwgYf1od7E5eDbjppoQ=
Subject key identifier: CE:D6:5E:40:1B:50:A1:D0:F3:7A:05:3C:A8:B7:B4:31:BB:20:BF:7D
Certificate issuer: /CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Certificate serial: 010D0C9F432858485F9ADCFB73CC1EBE52CCE200
Authority key identifier: 20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/03fd2f73-270a-3fae-aad5-2aa15608021a.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 399686
IP address blocks: 207.90.208.0/22 maxlen: 24
207.90.208.0/24 maxlen: 24
207.90.209.0/24 maxlen: 24
207.90.210.0/24 maxlen: 24
207.90.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:dc:fb:73:cc:1e:be:52:cc:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=67e1dd3b-9c8e-4b9b-b772-f1d4575383a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:39:81:91:64:99:a0:1d:68:87:a6:e4:36:09:
5f:26:c0:84:91:8a:f7:90:7f:df:93:fa:5a:74:27:
05:02:28:1f:95:ee:40:c0:03:61:75:50:36:92:6e:
51:b5:7e:40:22:86:14:e7:0b:c1:3d:35:56:81:21:
a9:b9:be:68:9f:96:bd:68:d1:24:e6:c4:b4:06:63:
55:ec:c8:d1:5f:3e:e8:7a:3d:51:62:ef:ce:6d:e8:
f6:ab:40:3c:84:b3:dd:3e:ad:84:d8:c0:94:fb:45:
b6:e1:41:5a:d1:42:22:24:11:f8:90:30:10:1b:bf:
2b:eb:09:27:01:7c:5f:da:22:b6:69:56:1e:ab:f5:
d9:45:30:ae:0f:fd:0a:05:21:f7:ea:92:1a:3c:5d:
4b:d3:15:f6:3b:cb:7f:13:f8:8d:52:6c:1d:eb:3c:
49:38:d6:6b:ab:d8:b8:6f:eb:c1:46:8a:14:22:df:
91:79:43:56:a7:ea:b9:d3:a4:4f:fe:c7:b9:be:74:
dd:62:89:46:d7:d6:69:44:b1:cb:ce:c8:7b:53:90:
86:c1:42:cc:d5:14:da:23:36:84:0c:70:40:44:f8:
bc:c9:50:07:b7:00:da:93:94:20:e8:01:32:da:20:
2f:36:a0:aa:24:77:0b:fe:d3:50:e2:58:e1:18:d5:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D6:5E:40:1B:50:A1:D0:F3:7A:05:3C:A8:B7:B4:31:BB:20:BF:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/03fd2f73-270a-3fae-aad5-2aa15608021a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl
X509v3 Authority Key Identifier:
keyid:20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.90.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:17:ce:32:b5:e3:2d:ed:47:a5:28:1f:37:fa:34:3b:36:5d:
8f:bd:1c:06:04:9d:2d:cf:1f:53:53:cd:e4:25:9b:5e:e9:f7:
d9:41:82:85:24:ba:e5:ce:3b:5a:f8:4d:c8:f0:c0:75:27:d2:
82:6f:57:da:6c:4d:ea:ea:d9:a7:cf:d0:00:60:7a:d0:f4:51:
59:c2:87:0a:c0:02:32:5b:59:33:ec:7a:fc:9f:87:6f:e9:6d:
f6:5b:b2:04:17:69:8f:45:64:da:d8:b6:22:3a:4d:9b:0c:37:
30:a2:6b:3e:c9:5a:df:ef:65:e8:04:60:90:ba:dd:48:ef:e5:
ca:ce:06:b5:94:b2:69:d8:7f:9e:43:31:fe:bf:15:6f:d9:47:
2b:8d:99:dd:fd:15:ca:88:93:ec:e8:df:54:f2:9e:97:d8:23:
27:9b:80:8f:48:2e:ff:02:3d:49:1e:dd:62:24:b4:6c:df:12:
e7:b3:35:4c:8d:88:9a:17:b3:70:65:6d:bf:b5:2e:ea:96:72:
70:bf:7b:24:25:33:22:ae:e4:90:39:86:e2:f7:12:c6:82:d0:
f2:b6:8a:44:68:62:5e:07:48:dd:41:47:12:58:16:8d:70:31:
bf:07:d1:70:89:08:65:30:e1:66:8e:14:e3:69:20:93:52:29:
19:f0:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:19 2025 by rpki-client