Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa
File: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (raw, json)
Hash identifier: QvTOnuYuPde+EgIjilaT0c7lMliCDeyuerLlYsxKoHw=
Subject key identifier: 5E:24:59:96:F7:1F:81:E8:50:78:6D:9F:62:6A:79:56:AF:46:56:E9
Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c
Certificate serial: 010D0C9F432858487A20809380AFE8BBE8134700
Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 4755
IP address blocks: 208.78.16.0/24 maxlen: 24
208.78.17.0/24 maxlen: 24
208.78.18.0/24 maxlen: 24
208.78.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:80:93:80:af:e8:bb:e8:13:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=ebaca1b1-a2ca-458a-90c0-026624e49a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:69:51:9a:14:47:17:1b:05:f5:09:f8:e2:
53:c8:da:0f:53:00:52:7a:20:d4:59:c6:f1:b7:4d:
e5:39:a1:88:fc:81:b8:19:e7:ac:d7:8f:64:14:38:
13:dd:8b:ef:86:df:24:69:c3:dd:05:e6:3b:f3:3f:
c6:97:66:45:f4:39:02:d0:c1:b9:c7:b9:25:1f:88:
2e:df:fe:10:f2:6b:01:0e:65:ba:4c:5c:7d:4f:9e:
6e:e7:3e:bf:98:82:5f:35:15:20:94:ee:5c:0d:8c:
39:41:11:87:4e:63:fe:dd:42:58:c8:25:44:13:61:
2d:69:1d:36:65:5b:ea:76:53:4f:db:dd:30:70:d9:
3f:ea:9c:eb:73:a7:d9:cc:96:92:a8:32:4c:6d:b9:
a6:e3:7a:5d:33:50:1a:03:cb:22:86:ea:d5:2a:9b:
d4:8f:63:c2:c2:0e:30:86:a9:ed:10:c0:fa:b3:59:
d2:91:50:64:8d:f4:71:b2:69:69:73:5f:5f:48:45:
28:95:3c:ee:63:41:10:bf:1f:82:ae:b0:46:0a:54:
c8:d7:09:d8:ab:3f:3a:1c:1b:d5:8f:ad:9d:77:e7:
3e:56:44:4a:78:54:b8:bc:67:f1:6e:7c:28:36:4e:
d8:72:c5:a3:c1:77:c8:d8:68:0d:62:e9:66:85:02:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:24:59:96:F7:1F:81:E8:50:78:6D:9F:62:6A:79:56:AF:46:56:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl
X509v3 Authority Key Identifier:
keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.78.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:74:a0:aa:8f:63:13:70:b4:e5:09:03:19:93:e0:be:8f:75:
b5:60:6b:f8:5b:8a:86:65:23:be:67:b2:1f:b0:cd:7c:30:e7:
e2:ee:ca:d1:d9:d0:ca:20:95:e2:7d:b9:c5:d3:21:91:14:11:
9b:47:d4:36:4b:a3:d1:e8:63:4c:83:fe:b4:81:d1:46:c1:88:
c1:eb:1b:4c:35:5c:4d:d0:e5:3b:0c:0a:0c:1e:a2:90:46:70:
8e:b7:33:9f:55:40:b0:c1:2a:37:fb:46:f2:ca:d3:a9:2e:20:
0d:3d:e4:52:a6:6d:19:a5:5c:c5:4d:38:dd:52:ba:fc:35:be:
ca:c1:ac:4b:22:dd:a8:4b:c7:6b:48:06:a1:0b:43:c2:54:2d:
95:25:69:e2:78:9b:20:ac:4a:15:1a:ef:c7:a4:f0:b7:06:97:
09:8c:23:1b:4a:fa:0e:1d:26:39:ff:7b:8d:39:08:53:b3:01:
b1:01:0e:dc:2b:26:be:4e:9b:84:91:76:f4:c7:9f:7a:cd:bf:
47:fb:a7:65:55:9c:6d:a4:c8:a3:18:3f:dc:e0:1f:cd:07:ea:
f9:dd:98:ce:35:bb:3c:c6:29:71:ab:b9:c4:dd:84:5a:4b:f1:
ae:29:60:26:87:08:b5:2c:a7:10:91:b9:c9:50:80:fd:e8:9f:
5f:09:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:05:36 2025 by rpki-client