Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa79796a-e22c-3fd2-8473-99366fdb08d2.roa
File: aa79796a-e22c-3fd2-8473-99366fdb08d2.roa (raw, json)
Hash identifier: YpTNwlrmAmJR7wKgGkPkeWAI6kIezw4Ld1nRwWPTgCw=
Subject key identifier: E1:7B:20:5F:09:77:C1:EF:E6:12:67:61:65:B3:EA:B8:DA:2A:13:A8
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858487CEB66937E57E23E0A1B6B10
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa79796a-e22c-3fd2-8473-99366fdb08d2.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 397243
IP address blocks: 199.7.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:66:93:7e:57:e2:3e:0a:1b:6b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=79daf357-f825-4673-9f56-61d083176d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a9:34:63:12:84:35:58:81:b2:91:a2:18:70:
7a:d8:9c:dd:1e:60:9f:11:aa:ed:90:68:ea:5f:9e:
c5:5b:84:d4:df:7b:e5:fb:af:41:1e:a1:f0:cd:7b:
4b:87:15:79:84:a0:4b:1c:37:8e:90:57:0c:49:92:
94:bc:29:c0:bf:e3:3f:5e:99:43:99:28:69:7d:77:
4c:de:3f:fb:ef:e1:71:36:7e:28:25:8f:72:bf:f2:
78:4b:25:90:00:b9:1d:18:f1:65:a8:93:bf:db:da:
98:7e:fe:ef:32:9f:35:c8:36:9b:39:14:b6:b1:81:
35:ce:e5:d0:46:62:b6:af:e3:44:4d:d1:78:e7:82:
ff:46:59:93:34:ec:4b:ee:cf:21:d2:cc:7d:17:c0:
57:89:cf:68:a3:86:a4:4f:fc:fc:91:96:4e:70:ec:
29:6a:b5:18:cb:a3:3c:17:a7:73:15:6c:e3:78:79:
c0:65:df:af:d7:1c:1e:95:ba:de:00:46:8a:db:f9:
d6:98:e3:25:c1:60:19:b4:47:6f:71:e1:5a:fd:42:
82:51:c1:8f:87:2d:14:2b:b9:69:21:63:d2:63:e9:
64:e5:f5:01:5e:37:f6:63:6b:03:25:29:c5:55:d6:
2a:16:30:12:37:de:aa:e9:a6:e1:74:ba:af:5c:36:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7B:20:5F:09:77:C1:EF:E6:12:67:61:65:B3:EA:B8:DA:2A:13:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa79796a-e22c-3fd2-8473-99366fdb08d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:c1:d9:2b:43:a9:18:09:0d:0d:dd:37:8f:08:be:26:67:03:
74:a7:fd:47:9f:63:94:5b:24:7e:e7:59:22:5f:9f:17:a6:49:
34:f4:9a:bf:cf:ee:42:57:26:61:3c:39:53:d5:f8:c4:aa:8e:
2c:18:19:fc:23:aa:3c:3c:59:28:a2:08:3e:5f:02:c0:fe:d5:
9c:a4:85:91:80:6d:08:dd:65:48:ce:80:36:ef:b9:4f:cb:3f:
7e:85:5a:dd:19:51:11:ec:39:88:48:98:39:af:fb:ed:2c:9b:
51:b6:26:f2:88:25:38:62:fc:7b:39:cf:e4:82:7f:4f:ca:84:
8a:df:c3:40:03:a3:72:6a:18:26:d7:23:d4:47:6e:f0:0a:23:
8e:83:78:6a:d8:a1:26:b2:bf:03:71:a4:3f:ea:71:fa:a1:cf:
bb:eb:44:ed:63:b7:d5:89:96:e5:d0:3a:d3:df:3d:e4:ac:5a:
b3:5c:da:5e:2a:89:e4:42:d5:07:57:b1:23:0d:df:29:56:d6:
85:f2:5b:a3:bc:0a:a2:d0:04:89:bf:36:d7:36:e7:a9:56:d9:
2f:0a:13:8d:b5:e3:96:b0:fe:ac:09:ab:15:72:25:38:22:c0:
ac:e9:bb:4b:50:aa:ec:3b:22:65:d6:6b:39:1b:68:14:df:ab:
9b:dd:7a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:45:54 2025 by rpki-client