Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa
File: 502da292-08a8-3b75-bc4b-8d390e5fe580.roa (raw, json)
Hash identifier: C1uI+jdtwQBQrzlUYHrOcbONqghbgUjoo1q30pzmd7k=
Subject key identifier: 72:60:4E:59:30:2B:EE:DC:6E:B9:AC:97:8D:9B:C5:23:96:5B:DC:8C
Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial: 010D0C9F43285848573ACF5D0A32FC97036E8D80
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 398210
IP address blocks: 207.211.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:cf:5d:0a:32:fc:97:03:6e:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=c1b1d78a-5fd6-4427-8e5b-e53cc991b634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:75:d1:a2:25:3d:14:16:e5:29:c5:22:7f:
c5:b5:92:41:0f:62:57:ea:bd:fc:57:73:d2:64:b2:
12:e2:17:2e:ab:39:86:ea:78:40:1f:15:19:62:fc:
47:99:b4:e5:4f:17:b2:8d:8e:42:f3:07:76:0a:6c:
41:01:fb:a9:0e:d5:1c:a7:21:86:26:3f:2d:38:46:
d2:9b:2f:44:54:60:cd:94:c7:f8:24:3a:86:66:dc:
6d:8a:ac:15:c8:a1:0b:f4:88:51:89:53:c5:13:8f:
fa:50:e9:43:cb:d5:38:bc:24:fb:96:76:d0:10:19:
0f:f5:3d:30:8f:a3:7b:21:55:bc:24:48:52:55:f3:
7b:35:c8:70:68:a2:9b:22:06:3b:f3:7d:06:bf:e4:
fe:98:8c:54:6e:bb:75:67:88:af:e6:d9:5d:4b:4e:
e7:6b:89:e6:ac:48:c7:cc:0c:e4:57:0f:68:a1:74:
aa:3f:af:92:fa:b3:b2:96:54:12:1e:50:01:1b:c5:
61:c1:a7:9e:5a:06:2f:d3:ce:b4:68:92:59:26:68:
62:a9:93:e8:f8:90:6b:90:b0:c5:d3:1a:1a:50:a3:
87:3b:55:5c:07:7e:be:38:a6:ca:01:c2:1e:71:6a:
1a:9f:8d:2c:06:03:ec:5b:47:45:75:6b:8e:be:3b:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:60:4E:59:30:2B:EE:DC:6E:B9:AC:97:8D:9B:C5:23:96:5B:DC:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
X509v3 Authority Key Identifier:
keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
sbgp-ipAddrBlock: critical
IPv4:
207.211.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:b3:c0:1a:77:f2:c2:18:1d:c7:54:b1:95:73:6e:1f:63:2a:
85:57:77:29:c4:59:b0:6d:e3:05:f0:80:cc:d2:6a:8d:67:66:
59:57:13:18:31:56:18:fa:f1:d4:af:14:e0:53:ef:0a:7d:f2:
27:44:85:5b:5a:f4:d9:17:94:2d:8d:db:36:3b:9e:db:97:06:
9d:ad:f5:12:8d:c5:c7:50:ff:7f:c6:f8:16:be:32:ca:d0:13:
55:2a:3d:ec:80:5d:d9:b1:df:2f:51:af:c3:ee:06:27:4d:c2:
08:6d:28:65:f0:65:8a:66:62:5c:57:a6:90:c5:0c:b2:73:d4:
16:43:f6:4d:7c:10:b1:db:d6:15:a9:00:58:12:3e:4c:e1:36:
a2:46:6d:cf:76:e2:e3:0a:97:27:3d:c8:12:84:87:5c:53:d1:
d6:58:2a:b1:cb:e8:f7:bb:db:cc:cd:4a:6f:46:ea:c3:e0:15:
db:78:a4:00:7c:5b:99:79:23:dc:ab:73:04:81:65:37:dd:f5:
21:84:b7:73:1b:95:d5:68:2c:c0:ee:3b:fb:1e:dd:5e:58:3b:
44:5c:7d:f4:38:18:06:8a:16:9a:8a:55:2b:f9:e1:13:87:01:
06:ea:7d:cb:a2:36:6d:a8:f6:69:5b:0d:36:3e:b7:82:4b:e5:
74:d8:92:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:55 2025 by rpki-client