Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa
File: 8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa (raw, json)
Hash identifier: SdHGH/xmDmtSH1cOTU0Uq4jsFGI9xtvGkFzYhMTcKUQ=
Subject key identifier: 7E:F0:E2:12:28:1D:7A:C0:EC:34:2E:39:CE:AC:B2:CD:E0:68:2F:C1
Certificate issuer: /CN=903ec3cf-858a-457b-844f-8c6283f5e5d9
Certificate serial: 010D0C9F432858486960695D3AE4B11C74235580
Authority key identifier: 3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 30255
IP address blocks: 66.205.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:69:5d:3a:e4:b1:1c:74:23:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec3cf-858a-457b-844f-8c6283f5e5d9
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=f1c3755a-9e9c-424e-9133-39b9be1007b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:81:56:3b:50:03:7d:61:3c:49:f2:0b:42:
e9:7a:5f:e0:fd:a5:e9:8b:a6:ae:4f:45:4d:29:1d:
7d:f1:5f:6d:dd:b5:cf:b2:6c:88:0b:e5:ba:52:a2:
2e:e2:4e:b9:c6:1c:f8:b2:c8:f7:7b:b7:0d:35:c1:
a4:9e:f3:fe:38:f7:bc:16:ab:fa:de:30:22:18:e5:
28:78:34:b8:df:6d:34:ca:63:1d:88:21:1b:4a:2b:
7e:11:52:7c:05:86:3a:c4:c7:52:4d:59:51:d0:a5:
d5:59:0d:91:ed:2d:f4:49:c8:c0:81:87:e9:e4:89:
30:4b:96:29:a1:1f:e3:04:a6:b5:08:4a:18:6d:84:
c5:4a:4c:18:60:7c:7b:8f:c7:ab:17:1a:53:04:dc:
c3:bf:6b:4b:31:05:b4:79:2e:52:b8:6a:ba:a1:ea:
b9:50:77:df:6c:d8:17:1a:f0:6b:d4:15:1c:05:fd:
2e:b9:d0:17:99:ea:8f:0d:4f:af:8e:3f:f0:5d:ef:
dd:1a:92:12:2c:ed:e9:3b:96:1c:7c:9e:b6:bb:d5:
63:33:1d:f1:16:96:24:af:98:eb:54:64:9f:3d:c9:
4e:81:cc:79:39:a2:67:77:db:ce:1b:b6:77:c7:28:
86:17:4d:74:69:50:6d:f6:c2:19:1a:ea:8c:6f:94:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F0:E2:12:28:1D:7A:C0:EC:34:2E:39:CE:AC:B2:CD:E0:68:2F:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/8d907694-f084-3661-b9d7-2e4ee9a5de9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9/903ec3cf-858a-457b-844f-8c6283f5e5d9.crl
X509v3 Authority Key Identifier:
keyid:3D:56:21:5F:13:B8:08:EE:C0:64:0D:52:8D:2D:55:75:E2:70:C8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/903ec3cf-858a-457b-844f-8c6283f5e5d9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.205.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:f3:4f:9d:21:60:60:fb:b2:39:44:b0:7b:47:3d:b3:6e:31:
bc:0b:50:0d:cc:c2:78:92:43:78:f1:83:5c:d0:24:cb:e2:b8:
5a:a7:0c:85:7d:02:9a:ae:2e:f9:b8:17:61:c0:db:49:17:d8:
15:0e:5c:03:6c:11:05:dc:33:ab:c9:59:a2:67:1f:e0:f5:30:
f7:9b:b0:6a:bb:9c:6c:d0:50:15:79:88:c7:83:f1:d3:51:c3:
21:bb:f7:68:84:11:16:5d:1a:e9:21:a7:49:5f:5e:92:3b:a7:
dd:c2:05:7b:14:eb:ec:ec:f1:1e:61:04:4a:05:01:de:76:5b:
64:89:f6:2d:6c:5d:4c:d3:71:dc:d9:ea:db:4f:f6:a3:3c:ea:
18:6b:f6:b5:7c:a7:31:19:2f:e6:c1:00:9e:4c:6b:e9:80:0d:
2f:3f:3b:ef:04:74:11:59:36:94:d2:47:88:e9:ef:c7:7e:b1:
17:dc:91:76:a5:48:45:ae:b1:ff:64:39:e0:ad:8b:ce:7d:f2:
fe:90:83:d4:b7:ac:7e:fa:48:65:58:b7:7b:07:41:a1:6d:8d:
08:4e:bb:d6:66:0e:d2:80:e1:46:ee:f7:e3:00:f3:a6:26:46:
c7:9d:f1:70:ea:ff:01:d4:f2:75:2c:6e:35:c0:00:43:7a:58:
9e:37:08:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:31:05 2025 by rpki-client