Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd8cf987-e31d-3aad-aa3c-c2a969971a17.roa
File: dd8cf987-e31d-3aad-aa3c-c2a969971a17.roa (raw, json)
Hash identifier: g7ZDcryFT1d/SkjlLSZolD3uzZUTrD7Ov5K0KtklrCM=
Subject key identifier: F9:02:8A:E0:9F:47:4A:F0:85:92:C7:00:4D:2F:82:DF:C8:44:20:A3
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFAC0F58DA3E1847541600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd8cf987-e31d-3aad-aa3c-c2a969971a17.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 7018
IP address blocks: 208.89.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:ac:0f:58:da:3e:18:47:54:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=5c8166c4-bf5e-4bab-85de-024c7feec14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:24:15:39:bc:06:02:99:a4:12:c3:63:df:
5c:bd:61:ee:86:33:0b:97:bd:c7:25:0d:dc:8e:7e:
ec:1b:c7:59:01:57:27:1b:29:31:18:72:1b:de:14:
f5:1b:48:36:ad:06:48:92:ef:e7:c0:3f:94:12:b2:
af:6b:3b:57:d5:ae:cb:ff:16:be:f5:96:26:76:c3:
09:04:44:00:0f:64:c5:82:d6:49:98:a2:50:5c:d3:
26:06:87:ca:68:2d:b3:1e:34:1a:67:8d:cb:0b:5f:
8c:49:84:89:46:04:80:4e:8c:7d:11:67:7a:52:9c:
de:86:eb:62:be:41:ad:f9:b9:e5:dd:b3:30:fd:ab:
0e:d9:2a:80:c5:bb:d7:a8:cc:ab:f4:c0:12:ef:f5:
7c:c5:0c:22:7b:56:60:24:96:ef:7f:20:1b:c3:ff:
38:3b:69:a4:91:9d:e9:dc:10:4e:f8:b4:69:01:1b:
4e:f7:f4:65:86:6a:0e:bf:91:cb:36:3e:b1:cd:ff:
2a:c2:65:7d:26:52:eb:63:dd:94:b4:b4:9d:88:5f:
5f:30:49:2a:95:22:b6:d2:51:f4:0b:f1:60:42:04:
42:4c:72:4c:16:52:14:27:32:b9:09:ed:54:68:a8:
90:ff:4d:cd:a1:7c:71:ab:3e:60:ed:c3:cf:38:3e:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:02:8A:E0:9F:47:4A:F0:85:92:C7:00:4D:2F:82:DF:C8:44:20:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd8cf987-e31d-3aad-aa3c-c2a969971a17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:d3:53:6d:26:99:10:ef:bf:08:3a:d1:19:72:54:e8:f1:f6:
1c:d6:38:60:cb:1b:b1:09:af:a3:38:be:3f:cd:19:5d:e6:2b:
e0:b7:e1:29:37:40:1d:0f:cf:81:2b:aa:9b:b6:14:e0:d9:49:
15:d2:64:c7:4d:c8:6c:85:fa:9c:1c:76:12:32:4e:c4:14:d6:
99:b7:86:22:20:42:0e:56:09:31:3b:da:bf:db:d6:3a:7f:4b:
0e:43:6f:f0:a3:80:d9:8e:59:00:7d:7c:d0:9b:19:28:34:b8:
ef:9c:72:44:22:ec:96:b1:a0:e6:54:ba:46:4f:98:e8:53:60:
e0:34:96:ec:f9:34:51:db:05:96:bc:c9:a5:ab:db:1b:95:64:
65:cd:04:13:95:44:96:21:61:21:14:9d:62:f0:16:f5:a2:07:
3f:ce:1e:34:a1:65:29:75:32:28:35:57:83:bd:b8:40:18:76:
90:a8:10:7b:ef:69:8b:e4:c2:fa:2a:f3:61:c7:fd:ca:41:df:
5c:a2:18:5b:de:86:86:52:89:74:a1:fb:4f:0f:cf:47:56:69:
68:7a:8e:77:31:70:f7:6d:db:85:82:07:77:f5:a4:0e:ad:30:
83:b7:64:07:30:f0:a3:35:58:b5:2c:ed:a0:20:7a:ea:db:cb:
82:e2:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:27:11 2025 by rpki-client