Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2e1a03e-e74d-3c75-bdf6-e5c05b9a0e2a.roa
File: a2e1a03e-e74d-3c75-bdf6-e5c05b9a0e2a.roa (raw, json)
Hash identifier: cuPNiL8prKIQtyXEzkBOqIlEo6gD+nJtgOHPHgG0GJ0=
Subject key identifier: E4:B2:F8:8E:C2:C8:AF:AA:77:EB:21:07:20:9F:20:F8:87:55:36:23
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848424B06351398F5638F6CF4C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2e1a03e-e74d-3c75-bdf6-e5c05b9a0e2a.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 22394
IP address blocks: 141.207.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4b:06:35:13:98:f5:63:8f:6c:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=f21ef7b2-9bc2-4ab2-b1d7-bbb8c73f47af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:a7:8a:5f:b5:c1:80:f6:60:23:60:5a:3d:
9a:ed:9b:65:ec:e0:82:34:f8:8e:8b:b9:f0:12:3c:
f5:c4:9d:d1:b5:36:c8:7c:87:19:13:07:72:7d:da:
77:19:56:40:a1:47:f6:d6:db:c3:b4:89:8f:82:bb:
1c:d4:c0:71:60:8e:ad:51:59:f5:ed:76:b8:a9:59:
8d:fe:87:d5:6a:4f:20:ba:d5:59:97:cb:a2:a4:c4:
97:bc:5d:ef:49:9c:46:c5:bc:47:33:53:8c:be:46:
e3:40:81:18:0a:dd:6e:38:c9:9b:40:f2:e9:7a:44:
4c:ee:97:cd:32:2e:d2:6e:a3:d9:f7:dc:13:08:2e:
3a:a5:2c:de:c2:ff:5b:b8:d7:8b:c4:fa:a0:2f:4f:
f8:7c:8b:88:2a:2c:8e:1f:1f:d8:19:b4:11:ce:1e:
5e:b3:cb:31:0f:f5:b4:9c:57:60:17:18:75:66:9d:
99:49:bf:c3:1a:51:ce:78:7c:06:07:f9:66:4e:47:
cb:c3:67:2a:7c:38:e7:67:e0:5f:37:a8:26:4f:a8:
8f:0e:3b:20:24:0b:c7:4f:26:8b:9d:31:de:dd:83:
97:a2:88:b8:57:c0:98:a6:89:7f:cc:4a:8c:a8:b1:
7c:2a:8c:5b:fa:0d:45:7d:c5:00:11:9d:a1:bf:6a:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B2:F8:8E:C2:C8:AF:AA:77:EB:21:07:20:9F:20:F8:87:55:36:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2e1a03e-e74d-3c75-bdf6-e5c05b9a0e2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
141.207.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:3f:1a:60:b3:5c:2e:2b:ce:3a:42:8a:e2:2c:00:f1:a6:66:
f7:90:f6:ad:32:dc:c4:45:9c:98:36:1a:7f:55:9a:ee:54:8f:
5a:fd:48:e9:e1:bf:99:11:73:9e:b9:b9:ba:84:98:00:f6:17:
0b:6a:b7:d9:1c:73:b4:99:33:25:31:dd:6f:61:3d:be:db:b8:
dc:9c:5d:ac:69:eb:3d:61:ed:26:b8:9d:20:4f:4c:42:1b:fe:
9e:a6:1a:4f:e3:5a:62:4a:69:73:7b:71:69:f7:70:a2:cb:5f:
e0:2f:2b:8c:ab:25:1c:db:71:d7:9c:39:85:f5:10:ee:2f:c2:
f4:48:c6:9f:fd:77:ff:e5:1b:89:07:67:df:d4:76:3d:df:c9:
01:96:c0:fa:57:03:0f:c8:c5:62:06:5e:ab:f3:51:29:52:94:
d8:6a:ea:d7:50:71:17:be:2d:e5:02:07:3f:50:17:fc:10:d0:
2b:14:f6:86:37:41:16:c6:28:b4:1d:1d:31:93:ae:5b:96:2d:
6d:39:13:a7:8f:6e:8b:72:17:9a:89:06:8d:8e:9e:95:b1:6d:
2a:2e:63:e9:80:b1:90:1c:54:d7:87:88:ff:2b:ce:e0:56:29:
c8:50:73:2e:4e:f9:b1:f2:d9:d7:03:e9:93:d7:45:36:d1:3b:
b0:8b:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:59:49 2025 by rpki-client