Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/722709c8-c58c-3565-83be-22e5840d133c.roa
File: 722709c8-c58c-3565-83be-22e5840d133c.roa (raw, json)
Hash identifier: 2Hj6Ogq0UjXGpeyWZygoZwBN3VYBWmTT0yKzI/uOkMk=
Subject key identifier: D1:05:52:0C:88:02:DD:48:49:90:72:B2:A7:F7:1D:D1:EA:C6:6A:26
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858482A8FE2FC876F26AA6321D800
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/722709c8-c58c-3565-83be-22e5840d133c.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 394437
IP address blocks: 205.196.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e2:fc:87:6f:26:aa:63:21:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=130c43a4-64d7-4a2d-82f7-6420be7bc57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:e1:ec:0c:7f:78:31:e5:35:7a:4a:8c:46:
2f:ae:c2:72:0a:fd:a7:f9:df:5b:da:35:32:f2:97:
f3:cb:a3:b6:dc:50:05:d7:93:dd:2e:ef:42:3c:cc:
13:94:3a:ce:d9:a8:f5:2e:71:50:2d:38:a0:90:f6:
2a:4d:f8:aa:46:83:b6:97:b4:4d:ed:dc:88:e9:7e:
56:c6:0d:aa:73:5c:2b:ec:81:bf:96:db:ab:e6:f6:
ce:9d:5f:7b:69:fa:4e:e4:d5:7a:31:9b:73:f2:dd:
e6:b2:08:b8:d5:0a:3e:f8:3f:94:6b:51:f9:b5:4b:
85:cf:1d:a2:b0:f6:31:21:3a:b0:b0:bb:b5:35:82:
ed:df:c6:8e:a7:e2:b8:f1:48:5a:0b:97:3b:3d:77:
2d:ab:ee:57:c4:0e:79:8e:27:0a:b6:65:53:49:3d:
86:ef:5a:6b:07:0c:ab:f3:48:96:e0:f3:8f:a0:0e:
af:f6:39:41:89:41:ef:24:a2:de:30:82:76:8a:05:
6f:15:ef:f1:11:05:ab:ea:fd:1e:91:a1:99:d8:73:
91:43:be:02:48:54:73:1b:ed:ac:77:06:53:31:fe:
90:09:e4:3b:77:40:c9:ca:e8:eb:66:83:30:9b:7b:
76:3d:5e:f0:60:27:c1:ef:e9:f4:a3:89:4c:5a:92:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:05:52:0C:88:02:DD:48:49:90:72:B2:A7:F7:1D:D1:EA:C6:6A:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/722709c8-c58c-3565-83be-22e5840d133c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
205.196.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e8:10:6a:9b:0a:76:2d:47:96:66:c5:aa:5a:d8:65:a9:5c:
22:d6:3b:d4:23:b5:7c:8a:07:0f:b9:da:29:f0:53:46:4a:bb:
25:7a:b6:22:67:3d:c2:98:55:f9:7f:cb:fd:b1:85:be:24:cc:
b6:84:01:bb:b7:5b:33:82:b6:35:96:0f:47:d5:fc:3a:f4:f9:
ce:2b:db:22:f6:e4:ea:c8:a9:b7:48:cb:ae:d4:6c:a2:d7:65:
ec:4f:73:bf:d8:b5:63:61:b0:f1:5f:25:6a:f5:d7:52:38:c4:
e7:11:be:f5:02:03:ae:d2:73:d8:d6:a1:c3:19:6b:c6:5a:47:
43:9c:92:82:f7:a1:47:c5:94:72:9d:b4:0a:c2:e9:ac:57:cd:
e3:c4:48:8e:77:78:17:57:c7:f5:5d:31:31:70:a7:10:b8:4b:
d2:3e:d7:29:ee:8d:97:b8:b9:92:89:56:33:2a:b4:83:d2:32:
59:e2:d9:60:7f:38:c0:77:93:f8:7b:f6:e9:e8:36:ce:3b:cc:
8f:8a:3f:2e:10:56:7a:14:9f:38:37:ff:90:b3:a4:4b:7e:06:
36:c4:17:13:aa:05:46:1b:e7:ca:7f:6c:ad:88:6a:44:75:b1:
c3:ca:12:ba:b3:15:55:af:2c:59:39:86:06:a0:82:e8:6b:bd:
e6:c5:36:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:42:30 2025 by rpki-client