Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8765f03-38af-33af-868e-84d53ca17010.roa
File: d8765f03-38af-33af-868e-84d53ca17010.roa (raw, json)
Hash identifier: emM3FPrKPfQRgrFAWqAXCUiQ8kQ8kKjHeCZUuQtWgEg=
Subject key identifier: CC:CA:10:FB:F9:EA:9E:9A:EE:CB:50:D3:68:28:D5:1B:F4:39:43:E7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A32EFAA59C82977B30F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8765f03-38af-33af-868e-84d53ca17010.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 67.54.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:32:ef:aa:59:c8:29:77:b3:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=7422d4bf-fb62-4448-a887-4e00c506c884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:be:b1:c3:38:b9:6c:a2:e5:6d:6b:37:19:
6a:c4:18:75:db:c3:98:83:a0:2b:92:86:6e:33:4a:
c2:db:06:d2:fd:1c:62:13:d2:ad:02:47:3f:ce:5b:
d5:ab:5e:de:7f:27:ea:1a:9d:11:08:bf:8e:98:38:
c5:5d:30:3c:b6:39:1f:b7:b2:13:78:36:51:7e:ca:
da:57:56:0a:b9:56:26:37:75:cc:9f:f9:d5:9b:ac:
5c:45:3f:d8:c3:6e:33:e6:c4:b2:ad:31:2c:fa:97:
86:d5:0c:17:1a:87:67:02:78:7b:0c:40:c6:a2:6b:
32:aa:b5:e8:9d:a2:d6:d8:9d:34:40:cb:87:5b:2d:
78:c3:b1:b7:c0:c5:a1:c6:a9:7c:34:70:0e:3a:cd:
86:9d:32:fd:b0:cc:a0:36:73:cf:a3:92:9d:9a:61:
27:e3:8e:cd:3f:1b:42:83:12:25:f5:b2:50:90:6c:
67:cf:77:80:d2:b0:64:c3:e3:23:11:be:d5:76:8e:
0f:73:b3:cd:67:b1:cd:96:68:c2:35:bb:ca:7f:ae:
7f:79:6a:82:f3:21:80:9f:a0:b3:7b:f4:f5:6f:cc:
a3:34:a4:b7:c7:93:d7:17:d7:5f:ba:b5:4f:bc:b7:
1d:6e:41:cf:04:da:e8:d9:87:a3:89:d7:db:86:9b:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CA:10:FB:F9:EA:9E:9A:EE:CB:50:D3:68:28:D5:1B:F4:39:43:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8765f03-38af-33af-868e-84d53ca17010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ca:be:46:42:8b:59:7e:00:85:ce:5c:c4:1f:47:07:96:66:
da:e0:a0:27:1c:3b:5c:f9:53:f5:15:45:ca:bd:3d:ba:29:a3:
ad:49:d7:e0:d2:46:a7:53:5b:63:0a:19:3e:7e:f5:c5:ad:d1:
c4:fd:42:73:30:c5:15:6e:81:fc:e4:4a:ae:bf:e6:b9:25:7c:
78:dd:d4:88:de:cd:9e:95:d9:f4:50:f9:4f:9f:dd:1a:f2:17:
2a:7a:05:69:0c:a4:24:a9:19:e2:42:4d:5b:64:d8:a7:c3:53:
4d:3f:34:63:fe:ce:3f:c5:bb:68:e7:e0:fb:cb:6e:f4:b9:79:
89:4f:d1:31:c6:d9:66:5f:18:e9:ce:e6:ff:f4:f3:c6:0e:6b:
be:7b:85:d2:5e:ca:b0:a4:fe:18:a1:c7:9a:aa:57:22:8e:6f:
9a:32:7d:a0:06:52:aa:6f:24:62:13:86:8a:59:ab:79:cd:5d:
8a:38:b8:2d:40:a7:8a:67:fc:43:81:33:ab:79:66:40:88:06:
bb:8c:c8:b2:55:4c:74:e4:16:67:7c:d5:22:2c:ad:f8:7f:a7:
82:9a:f0:63:c4:07:74:0d:cc:96:3c:16:12:42:80:a6:67:94:
08:d4:dc:93:bd:7a:6b:ae:57:25:b5:f1:ee:7c:40:c6:da:ef:
9e:8d:64:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:42:27 2025 by rpki-client