Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/0cc2a2e9-e72b-3f99-80c8-a2260297e3e2.roa
File: 0cc2a2e9-e72b-3f99-80c8-a2260297e3e2.roa (raw, json)
Hash identifier: OPtKOtrriFgqIxkYk8N1vm/eby0JeE+Cy2UOO67AKc4=
Subject key identifier: 95:70:B1:98:65:CB:71:2B:3B:B6:20:D5:DD:79:0B:BA:B0:30:1C:33
Certificate issuer: /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial: 010D0C9F432858480215080D6E14A42B8F2DA300
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/0cc2a2e9-e72b-3f99-80c8-a2260297e3e2.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 14618
IP address blocks: 206.225.201.0/24 maxlen: 24
206.225.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:08:0d:6e:14:a4:2b:8f:2d:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=63c7f6a9-7d20-4cb8-bbcd-17979f5cd797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:38:7e:b8:62:72:67:cb:c1:98:5a:d6:f2:
88:2a:54:70:01:e9:49:da:89:9c:98:b2:8a:68:d3:
7e:39:40:66:de:4f:2f:fc:a0:2f:45:98:f9:55:e6:
ff:05:b9:a0:ae:e6:73:32:32:5f:6a:2f:63:38:69:
df:b8:e3:2a:42:4f:6a:eb:27:34:28:f5:ee:6a:b6:
e3:03:f3:8f:51:9f:5c:1d:7d:0e:96:d9:c7:66:34:
c5:f8:c0:30:d6:9b:4a:13:84:9c:fd:98:52:94:56:
d8:9e:ac:64:7d:93:d7:3b:55:7e:4d:1f:45:fc:8c:
70:e6:17:40:b9:51:e0:bc:1c:22:46:bd:68:3e:f3:
ad:73:12:d1:d7:6f:03:eb:98:06:d6:08:74:cf:08:
ba:6f:f9:df:2e:90:72:ea:ec:52:1b:34:ea:49:fe:
70:bd:32:be:31:ab:0f:12:54:8d:d9:64:94:53:13:
34:a9:5d:82:5c:07:21:d1:2b:34:19:f4:38:d6:c4:
63:73:b9:fe:dc:cb:6b:38:95:7e:fe:f5:7e:b4:5b:
8f:0a:22:85:76:52:9c:7e:1f:ee:14:5a:b2:15:70:
4e:5a:03:86:39:53:dd:3b:f8:a4:91:6d:ab:d0:b3:
18:24:e6:ff:5f:e0:eb:75:f0:52:87:63:89:c0:6c:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:70:B1:98:65:CB:71:2B:3B:B6:20:D5:DD:79:0B:BA:B0:30:1C:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/0cc2a2e9-e72b-3f99-80c8-a2260297e3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
X509v3 Authority Key Identifier:
keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
sbgp-ipAddrBlock: critical
IPv4:
206.225.201.0/24
206.225.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:23:34:dc:41:12:98:7c:e6:75:75:e6:4b:83:28:d4:7f:de:
c4:d2:d7:6e:c2:8e:8b:f1:ba:b9:ed:19:0c:f4:43:f5:55:f2:
67:22:0a:a5:29:9c:08:0a:f3:41:94:00:6d:b1:58:14:f8:8e:
c8:65:fe:0c:ef:21:7c:f8:4e:b7:dd:10:3b:f5:48:13:d0:dd:
ac:2e:fa:e0:de:e3:23:a9:4f:00:8c:3d:e3:90:eb:ba:d0:7d:
99:7a:40:62:2b:d8:bd:02:84:8c:be:60:10:b4:6b:cb:39:23:
27:ff:c5:86:4d:80:08:19:e4:dc:e8:6b:fe:23:07:f3:ed:c4:
d9:a2:93:ca:d9:f5:32:d4:bc:b3:b2:90:c9:f0:59:89:d5:98:
9c:83:2e:f5:72:cd:ce:89:b8:5d:00:ed:bf:a9:74:6c:9f:53:
f2:a6:fd:c0:f6:da:82:2d:ec:e7:d2:5d:cc:7e:81:3e:32:63:
e2:33:b3:3d:36:2d:7e:7e:fa:5c:f0:3c:d4:3f:54:ac:4b:d4:
65:c1:2d:09:8a:44:4a:7d:c5:ba:82:39:36:82:59:39:7e:b8:
69:b8:52:39:b3:eb:8d:26:ff:fa:4d:0e:7b:b5:cf:f5:ab:9d:
4b:36:0f:76:19:fa:f0:ff:3f:a5:e7:91:c5:f6:20:08:eb:a5:
0d:40:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:34:42 2025 by rpki-client