Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a314008a-1b76-3c43-a0ee-dca834765f17.roa
File: a314008a-1b76-3c43-a0ee-dca834765f17.roa (raw, json)
Hash identifier: TH3bRwOf+xIxVBiiqQelZnaBa0WvAIVtI9NLQL7T3qA=
Subject key identifier: BA:74:DC:EB:95:36:09:72:F5:D1:AB:B2:0F:AB:1E:1A:FA:57:05:DC
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A3248AF0E9DBC692DC580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a314008a-1b76-3c43-a0ee-dca834765f17.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 67.54.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:32:48:af:0e:9d:bc:69:2d:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=28d25e86-1924-499c-b7a1-7e483a81179c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ff:21:5c:60:0a:8c:3b:24:9f:ef:fb:31:38:
08:18:95:85:69:a9:bd:87:a2:b2:6c:4c:dd:44:c5:
4a:b7:2a:3f:7e:55:8f:7d:e8:c6:d9:ac:2a:6c:c2:
f6:e1:26:ef:79:55:71:fc:68:e5:50:24:82:91:d4:
d5:65:7c:32:51:3d:7e:2a:de:24:f3:6e:36:23:a5:
aa:f7:f5:88:07:50:01:30:af:b8:8d:4e:12:2d:e0:
7b:71:ab:b2:19:e5:98:39:96:00:e2:d0:ee:cd:5f:
d5:d2:1a:02:a5:cb:63:d9:57:db:90:22:17:76:65:
c5:35:ee:ed:f8:1c:dc:6a:5d:77:6d:a0:97:38:c1:
95:94:2c:a5:18:7c:bd:50:97:f9:75:58:6c:bb:75:
0d:69:67:5c:08:aa:96:54:71:80:0e:09:74:70:cb:
9f:cb:6b:c9:2b:32:04:ae:fa:e4:f8:95:dc:ea:cb:
77:12:7e:1a:2b:1f:72:57:73:25:46:00:3a:26:60:
a3:95:4a:35:03:e0:41:a6:47:0a:de:f5:4a:06:85:
82:1f:2f:32:f1:70:81:02:5e:c5:c2:61:99:e5:d9:
66:e2:4f:51:97:6c:8f:1e:48:ee:1c:52:08:c4:5a:
58:f2:4a:3f:9f:a8:f7:fd:e9:83:c1:29:fe:ce:83:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:74:DC:EB:95:36:09:72:F5:D1:AB:B2:0F:AB:1E:1A:FA:57:05:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a314008a-1b76-3c43-a0ee-dca834765f17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:93:ea:78:f5:c3:fd:0f:5d:15:53:7a:45:b6:09:86:dd:6d:
44:16:c4:44:1c:3d:9c:76:dc:b6:61:f8:8e:23:96:cb:1b:f8:
3f:53:a4:de:80:a2:eb:8d:bc:79:1d:5e:58:95:00:e6:17:14:
b4:71:95:e5:d6:e2:7c:35:2a:5f:39:c9:3d:d7:36:77:00:bf:
4c:be:af:83:fc:8e:54:47:f3:05:51:06:06:64:8b:bc:d0:3b:
df:92:8f:57:43:13:a0:0d:1a:b4:82:17:18:0c:0b:77:47:10:
d0:5e:5b:54:91:68:4b:e5:e0:bc:96:d2:bb:46:c4:27:5e:bc:
a4:0b:f4:1a:80:79:ce:12:58:ea:52:09:e5:e7:04:8d:22:ad:
09:79:83:11:b8:0a:b7:d9:6f:de:19:ba:0b:7c:bf:48:3d:15:
f5:b9:99:c1:97:be:5a:2c:ab:35:f9:10:aa:ec:c5:78:96:89:
20:b2:8c:f7:8a:94:45:79:0c:04:8d:2e:c4:68:96:7f:f0:49:
2b:87:ad:5e:65:7f:bc:26:4e:4e:67:88:49:d9:a0:31:42:ac:
7a:fb:1f:2b:f5:d6:52:dc:2d:0d:12:7b:27:c8:8b:ab:78:e0:
eb:5e:9d:34:8a:89:62:be:b5:20:a4:d0:4b:c0:e4:98:15:03:
cf:7a:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:54:32 2025 by rpki-client