Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/227d8994-f85a-3324-94e1-1cebf2b86d70.roa
File: 227d8994-f85a-3324-94e1-1cebf2b86d70.roa (raw, json)
Hash identifier: SYdhwtxKIhtjG5+Nb3oKRitbklSu4s+DmUtcKqzeZA4=
Subject key identifier: 94:FC:BE:F5:AD:87:ED:8C:8E:62:4A:9A:B5:D5:CB:ED:77:34:8F:EB
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F432858484515875DB55102604508AA00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/227d8994-f85a-3324-94e1-1cebf2b86d70.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 206092
IP address blocks: 173.239.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:87:5d:b5:51:02:60:45:08:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=fb22925a-cd21-4873-9a03-3d94a20031f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:4b:c5:ef:5e:27:ee:ae:fa:38:24:13:28:
ad:0f:57:96:5d:1a:81:3a:b4:f9:6e:a9:86:f2:ba:
b1:f9:17:1c:6e:56:90:34:83:a4:ae:91:38:dc:db:
3c:1b:38:8a:82:26:b0:a8:89:6a:1f:ca:d7:41:47:
64:72:19:f2:e5:f1:36:96:ac:f6:3b:be:b2:65:20:
e9:b1:09:08:85:1b:de:d6:70:6c:65:19:30:22:73:
dd:5e:18:d2:a5:bd:09:18:4d:28:af:84:89:8a:d8:
82:8e:aa:6b:7f:c1:82:ef:34:8b:c4:f3:13:16:33:
b5:9b:56:bb:5f:00:94:0e:44:52:d5:98:82:22:15:
3d:bd:31:2c:57:65:74:21:a8:65:34:56:15:b9:e8:
82:a3:a6:60:c9:27:2a:bf:31:c1:b8:d7:7b:48:f2:
8e:5e:af:67:a0:dc:e0:5f:77:8e:63:7b:6a:08:37:
b4:27:df:40:55:c1:b1:c3:78:46:42:8a:a5:8c:33:
25:52:4d:f4:34:b6:d4:42:a8:46:ab:eb:14:8c:ff:
ca:c3:21:cd:66:73:56:02:33:b0:2f:a7:f7:87:fc:
01:5d:f6:be:a2:6b:b7:08:cf:5a:97:5b:6d:82:fc:
60:28:89:0a:bc:16:6c:14:88:0f:c0:79:24:a3:43:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FC:BE:F5:AD:87:ED:8C:8E:62:4A:9A:B5:D5:CB:ED:77:34:8F:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/227d8994-f85a-3324-94e1-1cebf2b86d70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:c8:a9:e7:20:eb:51:08:c6:4c:3e:f4:ef:b3:c0:9b:8b:4b:
d3:d8:f8:a7:45:4e:04:9d:8f:8e:a5:c1:f9:11:a4:9f:da:f4:
9b:3d:ce:04:3a:c9:5f:57:01:42:01:73:b4:fb:fa:9c:6f:ce:
e2:d9:26:c0:7b:8c:7d:4f:45:5e:e2:05:c2:a2:d3:3f:83:35:
33:9b:88:f3:0e:1d:d3:3a:e9:d6:13:e0:56:dc:ef:02:5a:b3:
a2:9e:85:10:1e:18:63:34:e7:45:5c:4d:7c:e1:2f:50:e8:33:
10:a5:21:f7:52:5f:4c:a5:56:9f:f4:28:ec:bb:7c:f4:e5:4a:
f9:d1:e7:d7:73:9f:48:5b:06:d0:ea:49:8a:19:2b:43:56:ea:
22:7a:b5:36:13:a9:42:cf:dc:27:a5:d3:67:8c:63:0e:5e:7f:
60:4c:02:8a:cc:32:07:9f:cc:cd:0e:b7:b1:bc:98:4f:5c:6c:
c2:1c:04:b2:d6:dc:d3:f9:1b:cd:f3:81:24:84:0d:c5:be:e4:
4d:25:2c:ab:61:e0:5d:f3:22:d5:18:5b:39:86:8a:be:53:04:
af:65:f6:bb:2b:5c:2a:8c:6b:f2:36:37:a6:59:c9:f9:3e:f4:
5b:d3:19:c1:38:72:69:c7:a6:a8:cb:0c:37:f7:96:28:ff:b4:
c3:90:6f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:57 2025 by rpki-client