Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f6e9bf9-d0c4-362b-8789-92fd2a236fc3.roa
File: 2f6e9bf9-d0c4-362b-8789-92fd2a236fc3.roa (raw, json)
Hash identifier: gBhE4h3RH5R9JcAACwHMyCU0qL5jNOubqcu+nA8eFEw=
Subject key identifier: DF:81:93:70:02:4F:74:D7:83:E2:FE:E1:12:76:44:4B:D4:53:F5:FE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100A9081A6CD0D19BBFFF600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f6e9bf9-d0c4-362b-8789-92fd2a236fc3.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 0
IP address blocks: 207.78.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:90:81:a6:cd:0d:19:bb:ff:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=aa98bf0d-d36b-4f42-94eb-3257750d9f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:55:d1:ac:65:40:fd:de:77:9b:18:26:41:d4:
91:72:92:7f:61:ef:f5:44:28:62:1b:8f:95:83:06:
dd:b9:bf:c5:e4:99:40:84:ac:53:89:0a:e2:d3:17:
a6:86:1e:b1:de:29:aa:e3:d4:a5:aa:d8:1f:43:a1:
5d:e4:61:72:0e:0a:2a:6b:8b:82:0e:4d:f6:52:f8:
b9:95:bd:e1:1b:f6:c0:08:b7:44:c6:e2:f3:a7:6e:
2c:fb:2a:67:87:88:1f:ee:f0:dd:ec:5f:f5:65:6d:
5f:00:64:62:01:82:31:19:f2:7c:5d:34:d0:f0:ff:
78:39:e8:9e:61:20:bc:fc:22:cf:91:c5:60:b7:4e:
47:e0:6d:85:66:b8:11:7f:d2:df:cc:13:2e:50:2e:
bc:d6:73:6e:25:29:cb:17:ed:e1:ca:f0:d4:82:f2:
ba:8b:08:10:e4:ea:59:dc:95:f3:fe:c3:7f:7f:39:
a2:57:67:a0:b8:7f:db:0b:59:a5:ca:16:8d:60:c9:
a6:12:fe:52:de:b0:3f:dd:93:42:56:f1:bd:27:cf:
7c:eb:33:c6:52:20:32:6e:b0:6d:ea:24:09:5c:74:
c5:d7:26:04:e7:57:d8:e7:48:c1:d9:2d:dc:3e:38:
f7:e1:52:74:ec:fb:0e:b9:90:90:e2:d9:91:80:54:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:81:93:70:02:4F:74:D7:83:E2:FE:E1:12:76:44:4B:D4:53:F5:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f6e9bf9-d0c4-362b-8789-92fd2a236fc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
207.78.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b3:74:23:4b:55:9d:26:f6:d8:a5:41:a3:0d:f2:d9:f8:a6:
e5:2a:29:00:d3:8e:3a:a1:0e:96:96:a8:0d:fe:9d:4e:fa:65:
bc:7f:dc:53:75:74:d1:2c:48:84:56:be:e4:c8:f3:89:12:86:
16:f5:5e:a3:4e:78:ba:a2:01:08:b6:12:0d:2e:c4:9a:ea:b1:
e6:9e:f1:37:4a:a1:c3:5b:77:97:e3:09:55:72:24:1b:31:9e:
36:19:4b:bb:d8:32:89:f8:10:26:9c:63:b2:dc:b7:92:a2:e6:
cb:fd:53:20:4d:2b:9b:03:57:c5:86:af:77:b4:8f:68:c2:35:
56:67:32:60:46:1d:6a:3a:a1:c5:a7:b1:62:e2:b9:60:99:b1:
63:c4:05:05:9b:1b:c7:a7:e4:4e:00:0c:14:5d:a1:1e:15:7e:
89:d3:ce:ff:f9:a5:9f:7a:b9:d1:1c:27:91:70:73:db:ad:9c:
e4:f0:92:6e:64:42:82:4c:df:84:ad:60:fa:9e:b9:99:0d:b1:
a7:d7:52:2c:f5:ef:01:97:8d:1d:2c:71:0b:1b:bf:d7:31:f8:
09:43:04:6c:f1:be:ff:b4:09:80:dc:9e:6d:46:fb:e9:74:1e:
62:15:7d:64:89:78:ee:da:35:53:e0:4b:5f:6b:45:2f:9e:14:
ca:7e:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:55 2025 by rpki-client