Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/ce40db16-84cc-3e9f-8547-3694743efdf2.roa
File: ce40db16-84cc-3e9f-8547-3694743efdf2.roa (raw, json)
Hash identifier: Gr84UFrcJeIUPe9spt1fMLsYOmOgUk62k8q6pMqTmos=
Subject key identifier: 22:05:5A:07:11:19:ED:7A:61:07:91:66:2C:99:8F:2E:6B:21:41:AC
Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial: 010D0C9F432858484C101D32F7DC6BCD6360C280
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/ce40db16-84cc-3e9f-8547-3694743efdf2.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 53828
IP address blocks: 207.200.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:1d:32:f7:dc:6b:cd:63:60:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=5307a461-5119-4986-97f1-6af841f04286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:ed:d7:20:cf:81:d1:af:6a:74:c8:04:7f:
33:53:7f:61:dc:e6:d2:58:12:05:19:f5:5a:d7:ac:
c6:5c:ec:37:ef:e4:d1:19:ac:13:f7:f9:90:7c:dd:
8f:a6:d4:d7:1d:a6:bf:46:69:83:f2:26:c6:54:3f:
6c:29:39:e2:89:84:1f:ac:e2:d6:af:f6:78:72:ad:
da:bb:1e:5d:8f:6b:3c:8f:ff:97:e3:94:93:50:6d:
a7:9e:c9:2c:1b:dc:b7:dc:d9:b1:f7:43:56:cf:ac:
a3:10:79:44:07:c1:59:52:7b:41:37:3f:b2:20:32:
29:3d:41:d0:ce:9e:45:bc:2a:bc:7a:e7:e6:ec:3b:
b7:be:eb:e1:c3:80:ff:cd:fe:8a:a3:bb:8a:12:11:
fd:c9:b0:66:67:65:4d:8e:5c:61:27:1c:3c:d8:6f:
be:79:b2:9c:2b:89:fb:2d:47:c8:97:01:3e:87:53:
c2:16:2d:45:89:0f:1d:3c:85:a7:8e:b9:33:86:73:
57:d0:94:45:fe:de:ed:28:ae:42:d5:51:d9:79:34:
2d:d0:e1:12:cd:da:8e:b3:25:a3:ff:d7:d7:9d:7d:
2a:52:96:01:d7:9b:49:92:fd:3e:5d:d2:10:db:9a:
20:9c:e6:6d:da:09:7c:15:42:b2:12:1b:22:b9:4e:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:05:5A:07:11:19:ED:7A:61:07:91:66:2C:99:8F:2E:6B:21:41:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/ce40db16-84cc-3e9f-8547-3694743efdf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
X509v3 Authority Key Identifier:
keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
sbgp-ipAddrBlock: critical
IPv4:
207.200.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:0c:ba:ca:ce:aa:2c:e4:b9:4d:b6:c7:d8:37:ab:1b:36:be:
2e:c8:35:24:b3:44:3b:d0:88:41:fe:d1:5b:40:00:54:3b:55:
a2:1b:1d:79:d6:dd:bb:36:e0:15:80:ae:4f:89:9b:5a:96:e2:
80:99:2c:8b:42:89:65:ac:e5:ca:04:42:c2:15:a4:51:97:22:
de:92:25:6f:a0:05:3f:e3:5e:9f:e9:a0:b2:46:37:2e:7d:a0:
00:75:4a:52:5d:e4:3b:dc:d5:4a:ff:f6:e9:3f:bc:ae:db:9b:
e5:33:1a:7b:44:fc:b0:af:a4:0e:df:cd:35:3c:64:b5:c8:b0:
1d:26:dd:91:3f:23:f1:a7:b8:22:db:3f:0b:bd:8f:e3:8c:37:
e2:46:9b:6a:6e:d6:2d:34:66:60:9f:e9:dc:32:6b:9d:2a:95:
fd:41:6a:ce:80:e4:88:fc:7e:51:b4:71:7d:7c:d1:53:46:3e:
12:fc:e4:92:9d:31:53:cc:26:db:98:73:c8:5c:bf:37:a4:6a:
bb:5a:fa:98:00:c0:1e:ae:39:30:52:24:af:80:94:d6:00:8e:
64:46:c7:cc:34:56:64:6c:99:50:44:e8:39:cf:d5:7d:6b:5f:
32:a7:66:3b:f0:f5:85:31:92:1d:e4:da:1a:e3:64:cb:84:fb:
d5:ed:d3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:35:15 2025 by rpki-client