Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/12670d4d-d305-33df-8fd0-2996efbc81d5.roa
File: 12670d4d-d305-33df-8fd0-2996efbc81d5.roa (raw, json)
Hash identifier: STtK+gKbSbqQFp5KJDRHvA5QngBRMYxZoMHeidvM140=
Subject key identifier: CD:2B:E0:97:3A:0D:CA:04:53:0E:DD:1A:9D:8B:50:C5:72:91:02:1F
Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial: 010D0C9F432858481F653447BB9C04B5D1D5D100
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/12670d4d-d305-33df-8fd0-2996efbc81d5.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 46455
IP address blocks: 67.22.208.0/21 maxlen: 24
67.22.216.0/22 maxlen: 24
67.22.220.0/24 maxlen: 24
209.51.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:34:47:bb:9c:04:b5:d1:d5:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=4aa8cadb-7ea3-457c-8a4c-c880aac58cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:c9:ce:25:53:b2:64:0b:a0:23:5f:ee:a5:
09:64:e5:7b:b4:e9:cd:fb:ce:b3:f6:f2:91:08:62:
93:3b:42:14:26:ba:26:a3:69:eb:f0:c2:92:97:d4:
6e:12:e2:4a:11:95:6a:ce:df:e0:8c:73:7d:54:c6:
12:d2:33:59:f3:22:b8:a2:04:ba:2f:9a:23:47:f1:
10:ce:c9:75:12:7c:be:24:c3:0c:50:0b:36:13:07:
0f:5a:80:85:59:fb:8f:60:2e:af:00:05:ea:fe:ed:
18:f5:21:32:39:43:c1:84:24:e7:43:02:2b:fc:76:
92:9e:99:fa:de:51:2f:ae:19:6d:be:17:79:63:02:
a5:86:d1:f0:13:f9:9e:2a:72:52:36:47:62:5f:86:
44:f5:4a:60:f6:df:dc:42:69:eb:25:a5:c6:a8:e6:
2d:e8:33:18:fd:19:bb:da:6e:18:9c:90:f5:7e:0d:
5c:a5:86:ef:bc:33:d5:3b:0e:80:9b:25:66:2c:16:
e8:61:a0:58:7f:7e:85:03:68:df:77:4b:24:13:f4:
09:48:4e:07:c9:30:73:f9:12:30:5b:d9:66:aa:f5:
2b:d8:b0:db:f4:97:98:30:4f:99:d4:e9:d7:20:0b:
28:c5:f2:d3:8f:cc:7d:a8:07:5c:34:fa:e9:a6:9b:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2B:E0:97:3A:0D:CA:04:53:0E:DD:1A:9D:8B:50:C5:72:91:02:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/12670d4d-d305-33df-8fd0-2996efbc81d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
X509v3 Authority Key Identifier:
keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
sbgp-ipAddrBlock: critical
IPv4:
67.22.208.0-67.22.220.255
209.51.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:b5:dc:7a:be:61:0d:2c:e1:02:0b:15:9a:b6:9b:1e:22:2a:
ef:20:66:7e:99:4b:76:df:75:ab:d6:20:ab:f1:18:f3:0e:3d:
23:f1:07:ad:7d:e8:70:1a:aa:fd:b7:53:72:0e:ca:81:1b:77:
ab:67:d1:50:0c:9e:c6:65:75:39:6f:17:54:42:5b:82:c5:62:
b8:b7:74:6c:b3:fc:f5:51:c1:88:1b:be:60:6f:49:44:37:5f:
70:c4:c3:a7:4f:95:2e:11:51:50:b1:34:82:e3:e3:9d:c9:4e:
ef:69:88:b7:0b:ea:2e:d4:93:d3:e2:c2:b7:69:1d:d8:bc:b9:
c9:19:76:3a:98:18:2a:e0:08:41:db:58:77:7a:45:dc:be:e5:
d8:f1:fa:5f:11:be:1b:53:25:4d:b1:70:b4:6c:b8:89:74:89:
e0:f3:70:c7:97:3a:e3:66:90:95:78:0f:3e:f5:5a:af:b2:40:
1c:ac:a4:33:be:2a:ce:95:22:d5:8e:fc:d5:80:83:6d:3e:ca:
8b:22:71:6b:67:9b:38:45:54:d4:55:21:a7:36:ee:17:71:9f:
b9:14:c8:0e:8a:c5:c1:59:ed:c5:f4:d3:de:a6:f5:f8:52:32:
7d:bd:06:6a:de:94:4e:6b:24:c8:62:b8:e8:00:04:9d:a7:5b:
fe:6f:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:24 2025 by rpki-client