Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa
File: cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa (raw, json)
Hash identifier: Md2K4oRBvzFnTEWpHVDywkXPBakK8Tj/a8ZWoQKuByk=
Subject key identifier: 81:33:03:BF:5E:F5:3A:CB:B3:3F:C7:34:AF:38:89:77:DC:2A:4F:96
Certificate issuer: /CN=0679e601-ff38-42c1-9b52-0b5bad96b962
Certificate serial: 010D0C9F4328584845158996613720A982D31880
Authority key identifier: FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 137509
IP address blocks: 207.90.241.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:89:96:61:37:20:a9:82:d3:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0679e601-ff38-42c1-9b52-0b5bad96b962
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=484a33c2-8c5f-493c-a09d-cc91196c3db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:25:ec:61:0c:a8:04:65:ca:7f:9b:25:5f:
a6:7d:a3:a1:fe:f0:a0:40:f3:f4:25:0e:7e:72:65:
74:45:78:e7:25:ff:c3:c6:52:25:2d:85:40:c5:cd:
d6:ce:7d:4c:a4:75:4a:2d:5e:d8:9c:0e:5a:04:3e:
6d:25:79:16:42:81:09:45:1b:30:51:1a:a6:81:21:
1c:58:19:9e:e5:57:89:43:74:db:a4:ac:d9:7b:1a:
be:6f:46:92:1d:ee:44:87:62:c4:09:69:63:de:b2:
1a:e7:b5:cb:2f:48:08:2d:da:d0:bd:58:b9:4a:07:
2e:e2:26:d5:3f:40:68:f0:86:5e:1f:be:38:08:03:
b6:43:07:6b:07:c2:40:bc:1f:3c:95:1a:e2:03:ea:
ba:e2:06:77:0b:45:74:7c:db:b9:6e:17:57:e5:f8:
e3:11:53:b7:2a:ee:06:34:e1:29:da:f7:9a:29:ff:
71:07:34:84:e2:7c:12:15:2a:3b:12:40:db:fe:21:
9b:67:94:54:9f:9f:28:8a:64:61:c7:96:03:a3:82:
ca:e1:18:08:d4:54:da:12:5d:48:cf:66:79:00:b1:
1b:2d:bd:16:83:d9:18:55:0c:66:81:5e:76:5d:ad:
01:5e:56:b9:9a:a8:75:b7:77:d0:a4:48:4e:9b:19:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:33:03:BF:5E:F5:3A:CB:B3:3F:C7:34:AF:38:89:77:DC:2A:4F:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl
X509v3 Authority Key Identifier:
keyid:FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer
sbgp-ipAddrBlock: critical
IPv4:
207.90.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:96:aa:db:d2:ad:de:8e:df:a4:33:b0:b4:95:f6:b7:7a:50:
fb:ea:61:f9:a7:f0:2f:ea:42:12:6e:f4:f3:d6:e9:2b:33:33:
49:30:6d:6d:32:4a:ad:4d:02:b7:51:1c:29:63:70:b3:33:55:
9a:5e:16:aa:c4:6c:3d:57:4b:14:16:bb:84:34:ee:74:21:80:
dd:92:3c:09:89:8f:1b:d8:21:1e:b1:a1:73:e0:22:77:af:0a:
0a:70:29:7f:e7:94:03:31:a9:dd:4d:45:5f:f5:93:97:34:f1:
34:fc:f2:3b:fe:4e:bb:99:a0:3f:14:e8:66:d0:1b:a2:e6:4b:
7c:81:33:b3:f6:7a:4c:42:49:59:7f:a6:92:56:6d:67:8f:05:
9c:79:53:27:37:46:2e:4d:c7:8f:ee:7d:7c:cd:f1:24:c8:03:
eb:f3:df:c9:e4:b6:ea:93:6f:28:d3:14:22:20:d1:76:ab:21:
fa:55:76:fe:eb:ff:34:e0:45:fe:ac:9b:f3:b1:d0:25:a8:27:
a4:93:d5:fc:52:fc:d2:c8:04:dd:d7:a7:46:1e:6b:72:45:62:
f0:4b:78:a7:1f:3e:eb:6d:74:0c:0a:c4:9b:a1:1f:52:8b:ac:
fc:91:32:77:b4:1b:14:52:04:b8:06:e4:35:37:ec:48:53:35:
f3:b5:b2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:09 2025 by rpki-client