Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/4abcb4fa-f6d5-3038-aab9-f1da35524331.roa
File: 4abcb4fa-f6d5-3038-aab9-f1da35524331.roa (raw, json)
Hash identifier: Hte9Om4tmAr2tS3SNsniku8haCFSA1Py8vulLAK1HYk=
Subject key identifier: F9:98:67:0E:0E:11:A9:7C:B2:87:2A:56:1C:6B:98:1D:46:FB:83:94
Certificate issuer: /CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
Certificate serial: 010D0C9F432858486695AD11DE90F14BD6D8C880
Authority key identifier: 77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/4abcb4fa-f6d5-3038-aab9-f1da35524331.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 20119
IP address blocks: 144.208.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ad:11:de:90:f1:4b:d6:d8:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=1f9c3c81-f7e2-44e4-b974-f1c8ef9e2962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:41:d9:d9:34:5b:e8:98:5d:59:88:42:c8:
a3:00:0f:f8:21:ff:ae:ec:97:0c:4f:f6:f3:a6:ee:
eb:b5:d0:4b:ce:a9:9e:37:bc:a6:6f:d1:ca:f4:c0:
f5:ca:98:fa:be:a0:95:a9:8a:c0:61:de:a9:e4:12:
07:f4:d1:96:bd:9b:2d:74:b1:ce:e9:8c:7b:13:2f:
54:1e:27:c9:76:8c:70:28:f4:81:df:54:17:ed:00:
d5:1f:eb:5b:fc:7e:74:61:15:a7:bb:8b:b9:83:95:
c7:0b:41:31:19:bf:78:8f:c0:4a:b0:f1:96:45:09:
a6:15:ef:e3:19:74:82:8b:b8:12:d1:fc:4a:a5:a9:
3b:d7:a7:e1:72:50:85:40:76:84:64:59:90:1c:27:
48:2f:29:61:a4:44:48:25:9d:32:ba:ee:80:a0:f2:
3e:28:46:8e:5a:91:fe:af:c0:c4:9f:af:ef:05:f8:
d3:48:31:e0:b9:88:aa:bd:38:3b:fc:ce:65:de:7d:
5e:49:6f:e0:d1:86:88:1a:9c:b8:9e:fb:86:38:0e:
49:1b:24:f0:d5:b0:7b:4b:35:ef:6d:7b:15:19:ba:
a8:4f:d1:f5:b6:90:93:9b:41:3d:1d:d5:71:54:7b:
6d:96:6f:c9:b9:d6:8a:4b:e3:8e:85:60:6a:b1:a5:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:98:67:0E:0E:11:A9:7C:B2:87:2A:56:1C:6B:98:1D:46:FB:83:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/4abcb4fa-f6d5-3038-aab9-f1da35524331.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl
X509v3 Authority Key Identifier:
keyid:77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
sbgp-ipAddrBlock: critical
IPv4:
144.208.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:a1:73:15:3b:20:d0:93:ec:1f:02:d4:6c:ab:fe:a0:07:6f:
ab:20:6d:54:06:65:59:27:c8:ab:c0:f9:1b:49:28:ea:f0:9d:
ba:c4:dd:14:7a:2e:7a:9c:39:6c:ba:ea:52:bd:e2:3e:6d:3f:
1b:4e:0d:2e:ac:b4:13:f6:d0:73:46:87:4e:94:d9:1c:2e:fd:
b1:f4:a3:b8:b2:a1:05:c1:45:cb:c4:89:c1:52:90:13:83:53:
f8:07:39:ce:0b:5d:b1:13:12:74:f2:1c:78:24:1c:d4:3d:cc:
cc:01:f6:3e:3e:30:cb:a9:91:60:7f:db:9f:f2:b5:18:b6:b2:
f1:6e:da:25:a9:4a:76:0a:5b:9c:39:d3:d0:84:54:47:69:92:
22:75:f9:15:1e:37:55:1a:11:6e:bb:49:ba:af:15:7f:5a:60:
ef:fc:74:2c:c0:5d:66:94:b3:33:a0:4c:a1:f1:93:b7:99:0f:
d1:6d:c2:9d:77:9d:65:5a:48:18:9c:64:47:ec:38:8e:d6:db:
86:88:ac:c0:6e:a9:45:c7:f3:2b:cc:d3:d3:fd:df:4a:0e:35:
9a:ab:ec:58:01:d2:9e:b9:38:45:38:e4:e4:30:e5:e9:be:4e:
2a:8c:37:17:cf:a8:bd:a0:12:4f:93:3b:df:8d:3f:82:f5:29:
ae:6f:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:22:02 2025 by rpki-client