Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
File: 826ab303-5f30-342d-91ae-d20393f81fa2.roa (raw, json)
Hash identifier: oM1sbr0LfMbywfeR89e9JkccSNE6U/dvkBZMNUXDmWg=
Subject key identifier: F1:4A:BD:7F:F5:33:2D:87:0C:99:D5:0E:2C:71:81:66:0A:0F:34:FA
Certificate issuer: /CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
Certificate serial: 010D0C9F4328584802150BDC1E4F3104D0416380
Authority key identifier: 33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 33099
IP address blocks: 207.167.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:0b:dc:1e:4f:31:04:d0:41:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=25d2aa18-cd15-45be-9f89-1424fa8e9693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:28:20:5d:b5:23:af:ee:04:74:b8:3b:2c:
4c:bc:98:39:21:38:d3:cf:fd:4a:22:91:8f:9a:5f:
2e:ac:50:16:fb:19:a9:12:9c:09:fc:87:aa:75:c5:
be:11:f2:7c:98:cb:c9:36:b7:fa:1d:93:14:05:63:
7b:f7:2b:10:c9:c5:27:c4:04:e0:14:1d:fc:18:4b:
54:23:81:e7:eb:78:8f:65:5b:b1:ae:7a:c1:ac:7b:
42:0a:27:cd:2d:c9:54:8a:89:bd:cb:fe:36:c9:66:
48:e5:11:be:90:32:56:fd:b5:06:2c:f8:91:46:42:
fe:0c:9e:0c:ab:c4:62:62:75:43:03:0a:b6:72:e6:
c9:56:28:3a:f6:80:f9:67:3a:bd:6b:d4:1f:dd:d4:
b3:ab:03:1e:66:87:ae:88:ac:8a:8b:14:7d:ff:c6:
96:41:a6:18:36:71:e2:1d:91:c0:a0:6a:63:b7:46:
2d:4e:cb:4c:9c:ef:56:3a:f5:4d:d2:04:a0:39:9f:
11:7c:7a:79:a6:6e:ac:b7:04:f8:cf:cb:18:4d:a3:
55:26:d9:74:63:a4:5e:ed:09:69:80:18:6f:16:68:
35:34:e7:90:1d:66:7c:79:49:00:ac:20:ad:f3:d6:
22:4f:95:1b:d9:5d:c8:12:b7:27:85:df:20:17:7b:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:BD:7F:F5:33:2D:87:0C:99:D5:0E:2C:71:81:66:0A:0F:34:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl
X509v3 Authority Key Identifier:
keyid:33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
sbgp-ipAddrBlock: critical
IPv4:
207.167.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:8c:8c:66:38:68:3b:4b:1e:ea:b5:a2:59:ae:92:d2:e5:7f:
ba:9b:f8:28:87:eb:b4:10:cd:bc:be:05:d2:50:3c:f8:15:ec:
39:64:a0:33:8b:e4:3b:fc:e7:87:52:3b:4d:89:fd:86:db:87:
1b:a6:b5:28:34:86:00:ce:14:6b:2d:c7:23:3a:75:a2:30:17:
84:53:08:ac:25:ae:a7:7e:0b:25:a0:68:04:2c:3c:81:76:8d:
6b:f9:62:df:85:b3:4b:79:3a:23:ab:04:e6:a3:57:82:69:91:
c7:09:1d:47:84:c7:7e:9b:4f:30:4d:7a:82:a8:7f:48:7e:1d:
82:7d:ba:91:40:fa:94:42:7e:22:7d:4f:5d:6e:67:33:7d:7f:
04:f1:54:9b:f1:cc:4e:c9:dd:b1:21:7c:f4:ff:a5:f0:9d:1d:
d7:be:2b:50:df:da:df:47:3c:07:23:e2:40:2a:95:e0:05:a2:
e8:91:1d:d7:c8:4c:29:99:c4:b6:61:b2:4e:8e:cc:04:aa:d6:
b6:8e:a3:27:9b:d1:d9:cb:a2:ff:43:70:31:cd:04:08:52:e8:
38:b1:4d:fc:7e:cd:75:19:c6:44:10:be:1c:ea:e5:74:b3:57:
6b:89:98:4a:3f:99:8f:07:bb:3c:c2:f3:de:c9:a9:14:f2:e0:
1f:63:19:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:57 2025 by rpki-client