Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa
File: 470a0d1c-0b52-3d81-807b-734f35cf00ea.roa (raw, json)
Hash identifier: 46siFe/u7QoZ7bjyTLI6hQddrlKPt/SlK32Y86iQ0a0=
Subject key identifier: AC:8D:01:4C:3B:E8:4F:90:B6:8F:7C:34:A0:F9:CD:8B:E4:05:51:94
Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17
Certificate serial: 010D0C9F432858486D904E778A13C025DB56F680
Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 14618
IP address blocks: 208.71.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4e:77:8a:13:c0:25:db:56:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=4ea4378c-0f2f-4d54-bc7e-0c9e4d2e8ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d6:a5:c4:c0:31:33:14:c0:3e:8c:80:d9:79:
10:8a:b3:88:40:df:e1:17:e3:dc:87:0a:27:7a:a0:
c5:30:51:c7:eb:8b:22:02:f5:c8:ac:ed:1d:d9:c0:
27:c8:01:ce:da:d1:c8:70:35:2f:ca:06:48:92:62:
a9:ac:d4:a1:86:d8:28:0b:4f:52:1a:25:31:24:d5:
b3:b6:81:7c:cf:1b:40:ef:a4:c1:09:30:74:36:24:
96:fd:7d:42:fb:44:12:e9:dc:a3:34:1b:aa:e5:82:
ae:f3:35:a9:a1:d0:c6:fb:9a:47:c8:0f:41:c8:bb:
61:8e:ed:96:df:a4:20:29:da:6d:a4:5e:71:c3:c3:
9d:1e:dc:c3:c3:63:f9:b5:6a:5b:64:4d:28:2d:23:
85:64:ae:23:7f:88:52:54:f8:5d:1f:9c:fa:6f:46:
fb:12:9d:24:34:0e:56:e1:84:51:ca:68:54:b9:a7:
eb:e7:81:f2:27:69:72:84:0c:58:60:e5:83:20:82:
88:b1:92:b1:0f:cd:f2:99:ed:1b:b1:79:78:4c:91:
78:11:ad:5f:b2:d5:fb:7c:d5:5d:86:d5:c5:3d:dd:
38:9c:cb:43:76:ec:83:c6:05:9b:c7:b1:15:1e:c0:
7a:5b:ed:29:73:c5:96:82:e3:4d:99:a3:dc:86:3d:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8D:01:4C:3B:E8:4F:90:B6:8F:7C:34:A0:F9:CD:8B:E4:05:51:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl
X509v3 Authority Key Identifier:
keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer
sbgp-ipAddrBlock: critical
IPv4:
208.71.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:94:7f:e1:08:44:ca:40:c3:2f:25:d1:8e:6a:3f:c1:d3:cf:
ba:35:b3:50:8c:c2:97:3a:14:0f:43:84:76:45:d5:2b:09:e4:
40:ac:2e:3f:94:91:dc:b8:2a:36:5f:3d:12:4f:ca:ea:d3:67:
19:ca:b4:37:22:e7:d8:eb:e7:8b:66:98:fa:ee:89:1a:f9:96:
61:4e:39:bd:93:97:0f:fd:4d:bb:69:da:df:e1:35:1c:68:2b:
1f:e5:e1:e5:d3:bf:0b:27:da:92:40:cf:b1:a1:d8:b9:cc:38:
aa:bd:ce:03:df:b0:09:d8:99:0d:38:48:50:3b:fa:38:26:f3:
47:3a:70:2a:80:7e:df:b5:17:55:34:4e:f4:9b:94:a5:00:e0:
6e:8d:0e:87:e8:44:ab:dd:68:a0:47:b2:e9:ad:a4:44:72:bb:
89:9a:2a:eb:94:0c:ec:c1:c9:b2:34:1d:cf:5f:e3:d0:72:14:
fa:8e:e4:d9:8b:1d:3d:87:10:c0:b7:08:08:a2:dc:48:f4:16:
e6:6a:d1:b2:f7:64:6c:19:a6:05:90:b0:05:2e:e9:b2:68:a3:
22:50:20:52:b3:b8:fc:32:38:60:06:d4:d7:d0:b5:84:68:d4:
b1:4a:7c:0f:fc:23:29:73:42:ca:d6:d4:fb:47:68:90:5d:47:
21:98:04:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:27 2025 by rpki-client