Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/dae284ad-220c-3185-bf30-245f48f314a6.roa
File: dae284ad-220c-3185-bf30-245f48f314a6.roa (raw, json)
Hash identifier: UgmsXCreKIpbK3uBMcc1jOIoEkGM63t9hwhfs6iHd1s=
Subject key identifier: B8:AF:18:F1:01:29:BF:A0:E1:8D:BD:C2:B6:33:8A:9B:50:BD:A8:BA
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848143A693C7F56BA0DA5382400
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/dae284ad-220c-3185-bf30-245f48f314a6.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 8560
IP address blocks: 67.217.240.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:69:3c:7f:56:ba:0d:a5:38:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=011a0cea-c2ea-4867-a155-f422bf364a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:1c:46:0d:1b:40:37:37:da:54:9e:3f:f1:
79:a5:c7:8d:e8:6e:7f:3d:27:3f:56:84:82:20:60:
21:9e:f4:ed:f3:e1:a6:60:b9:31:88:42:1c:d2:b8:
0b:9e:5c:72:a1:f9:bb:cb:a6:06:6f:71:67:d2:20:
7a:ac:b8:01:90:8c:84:2a:23:7c:85:06:78:e5:5c:
00:bd:2d:52:0e:87:3e:f6:af:fe:64:a6:67:6c:39:
67:10:94:eb:bf:d3:54:d9:5d:99:15:34:d9:59:22:
b3:8c:3b:2a:93:f7:c1:18:04:dc:6f:da:08:20:37:
0f:f9:38:4f:97:4e:fc:5a:c9:66:61:dc:d7:90:b4:
95:82:36:60:72:eb:b0:a4:7f:d1:d3:09:a3:9a:7c:
eb:1a:c8:f9:a2:99:c9:ae:9c:a7:c2:74:01:49:6d:
97:1d:9f:f7:62:f3:6a:a7:b6:7d:30:36:f0:dc:2b:
02:8d:df:c1:e5:ba:43:fe:55:e5:86:00:7c:f7:fd:
da:c1:75:8e:25:9f:0e:82:30:86:da:97:06:e1:43:
26:e1:df:0f:4e:b9:bf:8e:7d:52:c5:7c:fd:79:93:
7d:7c:16:63:08:05:cd:c6:34:7a:fb:83:ad:c9:8a:
33:a7:3f:6a:38:b4:02:7c:41:8f:6a:6c:0e:a1:09:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AF:18:F1:01:29:BF:A0:E1:8D:BD:C2:B6:33:8A:9B:50:BD:A8:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/dae284ad-220c-3185-bf30-245f48f314a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:37:09:1b:60:93:44:41:76:13:7e:17:84:3f:1e:c9:0a:d2:
bf:88:2c:7e:57:a3:ee:2f:5e:62:2e:0e:f8:7c:d1:69:34:8e:
98:f3:ff:8e:68:07:1c:cc:d3:83:40:42:1b:11:7e:0a:d3:e6:
da:74:e1:20:a3:bb:4c:1b:4b:d9:58:d7:81:fc:eb:ab:e7:7d:
78:c9:93:55:8f:3f:fc:11:ff:cd:d2:0d:eb:7f:cd:93:33:1b:
37:7b:d9:c5:f1:b9:92:a2:1d:67:0f:85:a9:1b:49:45:9a:5e:
b9:a5:93:47:5c:01:e8:2a:e0:13:bf:e1:2b:21:47:d1:11:4f:
96:fa:dd:09:08:b9:a7:49:b0:1c:87:1d:e5:2a:e4:9b:01:52:
c7:31:4a:70:82:a7:8a:e6:66:bd:d0:cc:1f:96:f7:81:79:ce:
ea:a9:1d:1a:8b:43:16:9d:25:20:1a:7a:2e:6c:b3:a0:e6:27:
e5:01:06:a2:09:fd:80:45:20:04:e2:da:59:6e:3b:c9:29:12:
56:b1:7f:61:df:14:87:9f:51:93:a2:c8:d5:d4:87:82:ff:f6:
5c:6d:31:a7:d5:85:89:06:c8:f6:5d:3e:bd:bc:00:6a:6e:f4:
8e:65:fe:3d:ef:8f:51:60:8c:16:8b:ab:ef:a9:af:6c:25:61:
49:2b:fa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:34:13 2025 by rpki-client