Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa
File: aafbf529-4916-398b-bbf0-e5bb5123a67b.roa (raw, json)
Hash identifier: iRxouw7QqSttm6ks8PeFHibegXqv9txaMXo2ptEZaiU=
Subject key identifier: EB:C7:3C:A3:E1:D7:59:EB:61:B4:C2:66:75:2B:4E:BC:E6:3A:EF:46
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F432858480EA512C5C0DE1C25D4F11380
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 2734
IP address blocks: 67.212.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:12:c5:c0:de:1c:25:d4:f1:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=348ad0f9-35be-4b26-998e-d04491d1af34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:9f:dd:0e:e2:ed:26:4b:53:21:62:e4:08:
58:34:d1:8d:a9:91:39:b6:65:6a:58:b4:21:43:c6:
28:35:a1:24:0c:4d:c3:d7:5f:1b:c5:05:59:29:93:
8d:a8:3c:0e:4c:67:fa:d5:fb:5e:c6:19:77:ec:14:
a6:d2:68:7d:ef:c8:f9:4c:33:d0:8f:9a:b3:ec:9a:
69:b5:76:16:53:2a:8d:0a:9d:ca:e6:a8:85:ee:42:
31:51:f7:59:c1:30:30:5b:b2:77:ce:48:86:09:7f:
b9:55:de:cd:a0:f7:10:f4:88:fb:5e:1a:e2:de:17:
97:36:dc:48:c3:0b:a6:4f:be:48:2a:25:56:d9:b0:
57:1d:87:45:06:ee:30:5c:ef:7f:ef:23:75:0e:2b:
98:4b:2c:91:63:94:0c:6d:86:f5:56:82:0c:e2:7a:
1f:30:0e:9a:18:ee:15:b1:3a:74:8b:9a:b6:e2:44:
0e:4c:88:ed:de:a4:17:3d:b0:f7:2d:e4:93:da:f1:
0d:48:b0:c4:22:bd:fd:7d:51:a9:ba:a2:cc:07:8c:
69:a4:43:12:58:02:33:51:a6:66:45:a4:9c:58:79:
de:c7:5a:b9:71:73:d0:1e:69:c5:e0:90:f6:3f:b0:
e1:f2:2d:f1:5a:c2:53:e7:e0:5f:2a:9a:30:d1:32:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C7:3C:A3:E1:D7:59:EB:61:B4:C2:66:75:2B:4E:BC:E6:3A:EF:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
67.212.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:2f:3d:cf:f7:94:ff:21:6c:32:ad:28:3c:70:a2:f0:42:f3:
d6:66:0f:d7:c1:96:1d:3e:b3:48:00:25:11:13:71:7d:0c:68:
e2:d2:a0:24:bf:0d:b6:cc:0b:1e:4b:5b:77:b4:4c:5e:43:81:
57:fe:e6:9d:53:63:b6:54:24:1b:83:35:61:04:ef:9c:f2:cb:
55:4f:11:67:75:c5:bb:d3:63:b2:56:f2:bb:fc:61:1e:a6:cc:
e7:f3:90:44:bb:35:e7:08:96:a3:5b:0b:fa:19:ff:3e:45:95:
75:14:16:73:ce:52:e3:e8:d9:a0:db:7d:ad:8f:1f:0b:6a:4e:
e2:d2:96:cd:c5:32:e1:e1:21:36:31:73:1a:95:4a:b2:4a:c0:
2b:70:28:4f:5c:d6:b6:2b:6d:1b:b2:1e:b3:15:47:d8:e8:6d:
b7:36:fe:3f:db:aa:8b:bb:f6:fa:8b:cc:cc:88:98:4c:ad:e9:
34:0e:b1:9a:d0:1e:45:1a:86:d8:a1:3e:da:d9:b1:88:1c:33:
fd:c3:ca:fb:a4:a0:6c:c1:43:63:9b:39:be:87:d8:cd:9d:dc:
94:ae:ba:f4:80:dd:ab:59:da:ca:d4:73:ca:bb:3a:16:6e:7c:
20:d2:a7:2a:7d:28:c2:4f:87:2d:74:f1:ff:a7:41:73:b3:88:
e6:fb:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:31:33 2025 by rpki-client