Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a19dd2c4-66d7-31ed-bda4-131b5cb91893.roa
File: a19dd2c4-66d7-31ed-bda4-131b5cb91893.roa (raw, json)
Hash identifier: RZob0n3xuOahaC4KDgxypHPC2ykbmRqnSQAag0QnUMM=
Subject key identifier: 0A:6C:41:01:8B:3E:01:F7:BF:B3:A0:B6:CD:7B:B1:64:0D:AC:53:85
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F432858483E1AA9FE285A2D6DD9787380
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a19dd2c4-66d7-31ed-bda4-131b5cb91893.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 61317
IP address blocks: 206.127.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:a9:fe:28:5a:2d:6d:d9:78:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=75488177-cc78-450e-82d1-4e8227a77974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:47:40:22:2e:ea:a6:e7:91:c2:8c:5e:df:
39:56:6c:f2:bb:e3:6c:7f:c1:cc:9c:6a:ec:db:8f:
9f:88:c8:8e:d2:36:4a:b5:f0:91:f0:f5:d0:67:46:
29:3c:8d:e3:4a:e6:b2:da:56:4f:39:93:db:bf:3e:
04:67:34:8a:b1:28:dc:97:08:b5:90:c7:0f:a4:cf:
13:e9:f3:c9:ab:02:57:a6:03:3e:dc:84:c5:86:f2:
6d:e6:60:a3:0c:dc:89:38:c0:c5:67:51:8c:f6:57:
d2:8a:4e:a4:48:6b:bb:1e:23:a6:e1:cc:2e:94:15:
36:61:b4:7d:40:ac:9e:f7:ef:eb:ed:84:6e:c4:dd:
49:9f:f5:e3:fa:bd:9d:db:4e:c9:f9:c0:b3:4b:ba:
7c:b4:93:4c:37:df:69:0b:df:25:4d:11:3b:64:93:
49:73:cb:ed:cc:33:b7:04:a6:c6:b0:ed:09:a3:7c:
c2:a1:82:de:04:06:57:0e:73:1d:f4:c6:51:be:41:
13:8b:4c:5f:9f:1f:df:78:dc:06:0e:26:c5:66:ff:
a3:6b:ea:38:5e:36:dc:51:79:9e:84:56:b1:34:ee:
8b:8f:7e:1d:ee:67:be:b9:47:56:f8:f4:9a:9c:4b:
07:16:8c:d9:0d:5b:1e:d1:6e:3e:b3:04:0b:64:1a:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6C:41:01:8B:3E:01:F7:BF:B3:A0:B6:CD:7B:B1:64:0D:AC:53:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a19dd2c4-66d7-31ed-bda4-131b5cb91893.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
206.127.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:06:da:9e:42:3f:58:66:66:4e:fa:db:64:99:25:e8:22:f8:
bf:06:a2:4a:99:14:0c:6a:cb:ef:cf:67:0e:52:33:4f:08:f6:
dc:07:b0:f2:2d:8c:e7:dc:9e:bc:61:2c:64:d4:6a:be:68:4a:
9a:b7:37:1b:f2:d8:9b:e6:44:27:26:00:73:30:e6:52:36:1b:
f5:1a:1f:ac:a2:58:3a:10:be:60:0e:8c:9a:37:1e:9a:a5:ec:
97:c9:e9:c0:09:4c:9b:c8:e5:ac:b8:d1:43:36:9b:63:08:44:
e5:03:73:cb:08:4a:30:14:fc:8d:aa:7d:22:9a:d2:31:c8:ae:
7d:e6:27:ac:1d:53:cf:fa:9d:ba:c3:e4:0e:6c:7c:da:51:51:
6c:40:f3:f6:90:fe:58:2e:9d:0e:11:ff:84:20:e9:a0:49:4f:
11:e4:4b:bc:c4:44:5a:0e:0c:86:c6:c0:49:e6:11:b6:21:1d:
92:76:f0:fc:72:19:b2:a9:3e:97:c2:de:d2:2c:5e:64:e2:84:
44:ba:b4:fe:b1:9f:4b:a6:e2:8f:ea:38:7b:2a:54:3a:d6:c4:
20:62:61:ec:4c:0f:69:95:4c:aa:a1:af:99:a3:8d:61:5f:84:
1c:3c:ed:b7:44:48:c2:50:0f:44:6f:41:f7:f0:87:88:f4:49:
0f:41:e3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:27 2025 by rpki-client