Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/47ffb887-3489-3759-98ab-1771ce7903db.roa
File: 47ffb887-3489-3759-98ab-1771ce7903db.roa (raw, json)
Hash identifier: BBIsP5KeHXKKaxN/2xyACVZ5WsBxxX2oG96uweHrjRU=
Subject key identifier: 12:B1:AB:B6:BE:E4:37:93:C0:E3:53:B4:3F:0C:0A:F2:A0:B8:90:F4
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584875F057241CD9E6FBFC8A0200
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/47ffb887-3489-3759-98ab-1771ce7903db.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 4540
IP address blocks: 205.233.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:57:24:1c:d9:e6:fb:fc:8a:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=a04f8d8f-6c28-48f7-8145-539a423de502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:23:c1:18:2d:f5:21:f4:e0:46:66:4d:35:
ff:0f:3a:95:a1:f4:dd:5f:10:e1:b6:65:64:f0:8e:
1b:21:2c:ed:92:48:31:5c:26:e2:ce:05:a7:89:2b:
71:44:be:2b:12:9e:e2:1b:65:5a:81:5c:4c:03:af:
cf:c7:85:87:6c:8c:e0:91:d6:22:43:f7:b1:de:94:
aa:b4:7a:cc:5c:90:df:76:ea:21:67:26:6c:6b:5b:
ca:6b:58:fe:2a:04:e2:1b:dd:f6:90:8b:c4:8a:18:
94:4f:da:17:cc:4b:40:08:48:4f:49:99:72:b9:2b:
27:a3:3b:d0:a6:21:c1:fc:e6:44:44:c8:6a:8a:df:
e6:23:5a:1f:e6:a9:77:75:00:4e:1f:66:da:ff:80:
8d:26:a9:e7:6a:a5:d2:7f:b8:5a:8b:12:60:0a:8b:
29:73:9b:b7:1e:65:a4:44:5f:dc:2a:03:9c:da:82:
46:6b:78:90:5f:8c:cc:b1:d7:8e:79:10:d9:76:cd:
9c:cd:34:eb:62:48:f8:6b:fb:67:b5:9d:1c:73:92:
f9:28:ff:a0:5b:51:cd:15:92:c2:46:88:87:9c:15:
73:89:1b:c3:1f:6f:7c:10:68:29:99:a0:57:c3:3c:
e4:dc:5b:d1:a9:8e:87:88:8a:e4:66:68:fa:65:a9:
0f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B1:AB:B6:BE:E4:37:93:C0:E3:53:B4:3F:0C:0A:F2:A0:B8:90:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/47ffb887-3489-3759-98ab-1771ce7903db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
205.233.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:29:e1:87:d9:d4:2a:15:e6:c0:0c:1f:95:e3:6f:45:b2:98:
36:47:db:2e:2b:05:43:d0:49:65:a9:96:4d:ae:a0:12:cc:41:
2e:f9:69:a8:5b:42:16:01:a7:19:9a:cd:b1:27:74:87:ef:16:
a4:0c:9a:ab:a8:ae:0e:0d:a2:7f:f3:05:7e:8f:15:3e:90:fd:
6e:a3:ec:47:23:bd:a5:83:42:b1:7c:e6:b8:3f:b5:a2:8e:fd:
53:93:b5:4c:35:02:b1:60:53:68:d7:20:d9:6f:bb:e5:a7:20:
85:c1:db:e0:a1:30:b6:13:28:0f:07:00:09:7e:b1:f5:9f:e2:
30:e2:10:41:a2:a7:7c:e3:39:7e:dd:d0:6a:14:34:15:6e:7b:
94:96:b4:ee:f6:44:05:50:80:95:1c:c2:36:f3:9e:b7:19:74:
97:86:0a:81:31:a6:1c:83:6a:10:91:82:7e:76:0e:c8:3f:bc:
f3:ae:fb:a0:af:ef:41:a4:e8:4b:c8:dc:62:7d:8b:53:0c:90:
68:c4:a8:5b:8f:44:8e:91:9c:25:4c:6c:c1:d5:f9:cb:a0:eb:
d4:d9:58:e7:7a:6a:78:06:83:3b:59:e0:b0:4c:f0:91:00:b7:
bb:72:60:b5:c0:75:82:ca:0b:d3:50:7d:5b:5a:d5:04:d6:d2:
be:b6:81:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:00:12 2025 by rpki-client