Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/243ae32a-0e53-30df-b63c-05db2f38f611.roa
File: 243ae32a-0e53-30df-b63c-05db2f38f611.roa (raw, json)
Hash identifier: 3x/a0uypsL68t96w+BJUF5u2c8RtMYwrCqKwRP0Xi4Y=
Subject key identifier: 1F:7D:66:6A:35:42:F3:29:4E:9D:17:FD:4B:36:FC:50:C1:DA:FC:97
Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial: 010D0C9F43285848345562A9B91E649FE9F96080
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/243ae32a-0e53-30df-b63c-05db2f38f611.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 64213
IP address blocks: 206.53.142.0/24 maxlen: 24
206.83.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:62:a9:b9:1e:64:9f:e9:f9:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=a809811c-9ea3-49a4-8f16-27448f362f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:f4:5a:73:7e:6e:c8:0d:d1:25:30:02:78:
4d:49:e1:a2:bc:c1:f7:4b:05:85:57:5b:b4:61:89:
e5:46:69:b8:1d:02:a6:8f:1c:45:44:8e:c7:01:89:
a7:71:a1:33:4e:c8:74:19:33:95:31:0e:1c:0e:ce:
ad:6b:5e:49:18:89:ae:7a:6a:3e:42:0a:63:2d:42:
c1:e1:31:6f:a4:1a:5a:34:a7:5e:bf:5b:6c:3a:34:
66:4b:17:09:94:d4:96:8e:a3:1f:55:4d:a1:63:79:
41:3e:a2:64:c7:b7:a6:10:83:0a:26:6a:89:a2:68:
eb:69:4d:57:ff:16:1e:5c:0f:bc:a0:d6:3b:19:d7:
ba:84:c0:a5:11:80:6a:a8:d7:18:60:21:7b:30:83:
09:54:26:d3:39:c1:49:cb:8b:53:9d:70:ff:15:1a:
3b:e6:18:d5:25:08:6d:c6:55:88:ac:33:36:95:1a:
6a:75:68:88:6b:c9:a4:af:dc:0e:64:96:17:d2:e4:
a9:29:bc:8d:95:71:24:ed:4f:f4:bc:33:12:42:48:
43:31:26:3c:83:9c:21:3f:c6:31:6c:44:22:0f:d5:
69:ee:16:80:59:99:92:62:48:5f:b7:ef:cb:2b:48:
1e:72:29:0d:0c:c6:98:c4:80:e9:c5:15:63:6d:cc:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7D:66:6A:35:42:F3:29:4E:9D:17:FD:4B:36:FC:50:C1:DA:FC:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/243ae32a-0e53-30df-b63c-05db2f38f611.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
X509v3 Authority Key Identifier:
keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
sbgp-ipAddrBlock: critical
IPv4:
206.53.142.0/24
206.83.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:18:b4:a6:40:07:c8:c1:3a:e7:5b:5f:6b:c8:30:12:30:09:
99:bf:13:63:05:d1:30:72:77:df:32:f6:cb:64:bf:74:83:14:
6d:67:82:cf:35:db:8b:61:24:67:eb:41:c8:73:97:31:ac:02:
f5:91:a8:a6:f7:34:b9:d6:f1:40:a8:c5:3e:70:14:dc:08:62:
58:91:a9:e8:80:f1:7f:a2:ca:56:3e:b5:69:28:49:64:35:6f:
9c:53:7f:7a:31:f7:19:a2:ed:c6:16:26:87:14:93:2b:1a:5b:
d7:d2:24:6a:92:91:8d:88:cf:b8:10:9a:26:f9:6b:c0:cf:d9:
c6:80:c3:a2:5f:ff:37:30:44:84:0e:87:9e:7e:66:2a:90:89:
45:3e:b1:3d:77:c8:c6:01:d4:86:ed:de:be:65:e5:dd:25:76:
c3:5b:dc:0b:44:c8:c5:a3:3b:0c:10:93:f8:87:9c:44:e1:7c:
9a:28:90:29:03:e2:ce:28:6e:9d:9f:18:02:8a:d4:f5:7f:c4:
6c:79:a5:48:cd:1d:65:47:64:50:57:f0:07:79:3b:ad:b2:08:
61:7a:ea:21:0b:05:48:a8:33:46:20:bf:67:6f:da:60:ca:9a:
f2:2f:a7:ed:f2:91:6f:1e:b1:e7:68:44:d5:18:51:24:8c:01:
66:71:32:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:55:45 2025 by rpki-client