Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/31c2b89b-61d7-3dc7-a0b3-5cae59e8292f.roa
File: 31c2b89b-61d7-3dc7-a0b3-5cae59e8292f.roa (raw, json)
Hash identifier: m2iS4HXrhrQm8RNQ/IWzWVkGVRQlHS4qHJJb/quOeQ4=
Subject key identifier: B5:15:01:5C:AE:9C:3B:CB:1D:86:70:61:D1:4A:FC:EC:E0:69:1E:0A
Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial: 010D0C9F43285847FB1A200683F19077F986FD00
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/31c2b89b-61d7-3dc7-a0b3-5cae59e8292f.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 397361
IP address blocks: 67.22.221.0/24 maxlen: 24
67.22.222.0/24 maxlen: 24
67.22.223.0/24 maxlen: 24
76.77.26.0/23 maxlen: 24
76.77.28.0/22 maxlen: 24
207.53.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:20:06:83:f1:90:77:f9:86:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=54fd8949-ecf4-43b8-bd32-08ec2be241df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:67:d1:6b:a0:db:f0:ea:b6:5d:d1:8b:e0:
f1:2b:1b:b2:38:ff:e3:2e:99:2a:67:19:96:81:b8:
27:71:81:9a:90:1a:f5:a7:d2:32:5d:13:10:d9:bb:
d1:25:d3:d6:08:77:d8:46:dd:c1:f5:ab:76:f3:85:
51:a9:3e:71:dc:9e:1b:04:b4:d3:38:60:2f:1e:35:
ed:6d:5c:4e:91:38:63:43:b4:d5:a1:ca:e1:b5:38:
b0:f0:fe:fa:23:07:06:5d:20:fc:d8:81:93:f6:ef:
55:6d:bc:6b:e2:d2:b4:04:15:79:3e:5f:b9:4e:5e:
92:20:53:6c:9c:19:40:2f:93:3c:50:1a:e7:76:cf:
f8:b0:e2:49:0a:e9:f9:a4:b5:0b:0c:24:3a:1f:58:
40:6a:da:82:7f:ed:87:36:83:2e:38:20:ae:55:4f:
a9:4e:9b:31:9d:34:3b:c3:c5:b3:0a:93:c3:ae:24:
35:79:c0:2d:79:e3:da:7c:ef:0e:e7:b6:4a:5a:45:
44:62:a9:90:60:60:fb:a6:97:87:af:1d:fe:77:4e:
5b:48:35:bf:bf:eb:d3:b0:7c:55:8e:2c:3c:2f:e6:
e0:e2:7e:c0:12:c5:ce:05:8d:4e:6d:eb:69:32:1a:
d9:c1:3e:29:ba:54:df:de:34:ff:32:5e:67:22:9b:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:15:01:5C:AE:9C:3B:CB:1D:86:70:61:D1:4A:FC:EC:E0:69:1E:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/31c2b89b-61d7-3dc7-a0b3-5cae59e8292f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
X509v3 Authority Key Identifier:
keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
sbgp-ipAddrBlock: critical
IPv4:
67.22.221.0-67.22.223.255
76.77.26.0-76.77.31.255
207.53.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:50:a5:4e:11:1a:62:56:97:7d:7c:10:9b:c4:77:77:6c:34:
c7:59:d0:cc:b7:41:7a:94:a0:4b:8b:9c:d4:aa:07:2a:ee:af:
95:7b:46:7c:f1:1d:d8:a0:99:2c:da:92:ef:57:70:6f:53:ee:
20:e6:39:b2:e6:b5:8b:2c:d3:c1:f4:2b:b0:8f:45:1d:07:ea:
17:22:42:08:88:48:5a:c4:7c:ee:7f:90:53:b5:e1:b4:27:24:
f9:3a:70:c3:f0:e9:21:25:45:e4:73:1b:9a:c0:a7:0a:3f:c2:
14:3f:e0:1f:c8:2c:e0:71:b9:70:29:b2:b5:bf:a7:c1:ee:e3:
30:b8:6b:32:ad:df:6a:0f:b7:a4:85:5f:91:46:46:b1:01:4b:
9f:f0:3d:07:44:85:0d:86:5a:25:58:10:19:94:2a:00:66:6f:
c0:ae:b4:ee:4b:ee:15:9a:ea:82:2d:8b:ce:d1:03:09:df:08:
b6:9a:81:ed:25:6c:c4:7d:29:37:82:58:bc:fb:7b:db:ec:91:
26:54:26:a8:74:95:42:e7:1b:9e:1c:3a:3b:8f:16:94:e9:96:
91:c7:87:9a:b4:31:33:b7:25:25:9a:50:eb:60:b1:1f:a9:12:
8c:17:98:c7:c2:14:b0:a0:0d:04:d2:87:7c:6b:33:96:40:6f:
33:ea:d9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:55 2025 by rpki-client