Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa
File: 06aa229e-21d5-3132-8604-c88f6941821b.roa (raw, json)
Hash identifier: 8jPUh74JvlEtHMQKE7gL32Xi8pCURtezzRI+VU43f+Y=
Subject key identifier: A8:DC:D0:B1:F7:7B:60:BF:A0:97:97:EB:9A:B9:C8:70:E7:67:98:A4
Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial: 010D0C9F4328584871C07268B26607C5E9103B80
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 46432
IP address blocks: 208.88.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:72:68:b2:66:07:c5:e9:10:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=3e5e9e3a-6ef7-4d93-852c-2c64cc8eb824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:34:fa:12:76:51:ae:e0:32:09:c8:80:76:
49:74:c6:be:41:d0:bb:18:1e:e7:af:ec:9b:88:85:
de:2e:87:d8:65:d3:0f:ab:38:96:6d:ed:28:13:4b:
54:02:cb:e9:62:d7:75:b1:78:40:c1:17:04:80:d8:
39:5d:dc:1f:26:fd:e2:e0:19:d1:43:4a:d8:7b:d3:
81:0f:04:b4:b9:d5:42:94:4e:4d:9f:cd:95:2b:48:
1a:fb:6e:38:d6:f7:8a:b6:5b:ee:68:30:c7:11:3a:
95:aa:af:14:64:b0:5c:96:9c:c9:ca:eb:3e:4d:df:
01:c5:4b:4b:3a:17:05:b4:0b:11:62:e2:58:74:e5:
70:3d:2b:96:30:93:5f:cb:e4:c0:e6:0e:61:73:2f:
c6:aa:91:6f:08:f3:e2:33:d1:a1:2d:7c:0b:be:42:
6b:63:a2:3f:c4:2a:ac:29:30:2d:bc:85:cc:69:87:
21:c4:87:a4:e0:41:f1:f7:95:3b:50:87:4f:46:88:
ca:b4:c4:f0:47:0c:d0:74:74:49:b7:5f:6a:09:bd:
f4:eb:23:84:47:49:9a:b5:be:a9:b1:a8:f0:2e:5e:
a9:ef:68:89:03:8f:9a:63:bd:71:48:ae:02:ff:53:
62:7e:2d:66:89:f8:60:6b:71:44:94:ef:56:57:97:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:D0:B1:F7:7B:60:BF:A0:97:97:EB:9A:B9:C8:70:E7:67:98:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
X509v3 Authority Key Identifier:
keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:44:0b:e8:a6:01:db:4e:4d:c6:1e:57:03:5a:fe:3b:21:48:
e6:42:11:30:a8:3b:f3:d9:2d:a2:19:99:98:de:77:6e:8f:ad:
2b:6e:cf:ff:28:78:d7:6b:dc:e2:52:04:d3:a0:3d:d5:55:b4:
e7:60:79:51:d6:87:57:4c:b0:91:6b:e8:4a:78:67:26:f4:f8:
5f:56:6d:b5:4d:96:ef:19:aa:b7:db:c4:15:f2:d3:f2:ac:b6:
ad:35:cb:86:e6:b8:40:6a:d9:bb:19:40:a4:0c:c0:60:75:60:
15:65:80:b0:d7:bc:92:a6:f1:36:49:d0:72:75:25:43:e0:79:
34:1d:3c:4d:4f:d5:48:e4:43:a8:ec:0d:bc:27:fd:c8:50:da:
89:39:a0:2b:02:a9:f0:37:c9:d4:7d:30:34:4c:4d:25:47:c1:
0b:67:21:21:05:8c:1a:cb:2f:7c:7e:d6:b2:3c:68:51:33:25:
87:b0:39:ab:f9:9c:2a:14:65:b3:f1:2e:e3:22:2e:97:95:54:
f8:e8:ff:e2:fb:e9:d5:3a:f6:42:40:53:21:80:a2:73:38:de:
28:2f:3e:38:61:d1:4d:0a:04:7c:53:3f:8c:fc:bc:db:c7:fb:
fc:fc:69:bd:07:11:ae:24:73:a5:7d:10:d7:47:de:87:7b:e8:
e8:26:87:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:58:33 2025 by rpki-client