Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa
File: 4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa (raw, json)
Hash identifier: wNSb7vT+8yXDbSyAG3L1eo/eJ+HDFu7FpyN1YcPM7yU=
Subject key identifier: 83:DE:AC:2C:82:5E:98:02:A4:A3:9F:25:72:67:F9:7C:08:DE:1B:57
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F43285848222FEDD47D15EDA864F54B00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 13781
IP address blocks: 8.8.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:ed:d4:7d:15:ed:a8:64:f5:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=fe00cab5-ddbb-448f-b727-5f34e5b2b358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:47:bf:aa:30:63:24:88:70:75:d2:95:a5:
ac:3e:f3:64:87:d7:01:a4:0c:74:50:40:f5:7b:82:
b8:4d:41:ee:db:51:74:cc:a9:d7:fc:a3:eb:c0:71:
03:30:ce:01:c3:b2:7f:e8:5b:7b:5b:08:9a:14:6f:
44:19:3a:9f:0c:3a:ea:7c:15:b9:9d:23:8f:3e:fc:
a7:74:c9:7c:49:62:16:36:e3:26:21:3d:4c:b2:03:
c2:ab:42:8a:5c:65:06:1f:dd:ff:d8:65:21:a2:b8:
2c:70:32:8b:e9:8e:c6:8f:cd:2e:e7:27:01:c9:37:
47:90:85:0e:55:e1:99:a1:10:7e:9c:1f:84:70:5e:
58:00:40:77:43:14:8e:5b:4a:76:9e:55:68:cd:3b:
2c:bb:ae:9b:8b:57:4e:23:37:ed:ac:e8:53:0a:e4:
09:1d:83:40:77:2e:37:a3:fe:7a:30:67:a7:ce:c2:
88:4c:c7:16:5b:7a:d6:99:44:82:36:d4:cb:b0:fd:
eb:0c:ee:e1:83:8f:93:6b:6e:64:90:6c:7d:5c:20:
b6:3f:76:4e:35:dc:8e:6d:98:57:e5:7f:78:7d:71:
71:de:59:67:c3:7d:38:ca:f6:e8:a0:db:df:6d:e3:
b0:8a:2d:64:fe:c6:e4:f2:3a:39:eb:72:4c:dc:5d:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DE:AC:2C:82:5E:98:02:A4:A3:9F:25:72:67:F9:7C:08:DE:1B:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.8.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:cb:fd:f5:45:b0:31:98:58:e4:09:1d:fd:d3:8b:07:b6:31:
d3:01:30:86:5b:21:50:ff:a8:f7:9c:cf:9a:5c:12:54:74:03:
5f:1c:f8:d9:2c:cb:f3:9e:3f:10:4e:20:79:24:8a:51:63:c8:
df:62:2e:ff:cc:8a:f1:00:49:d6:82:93:86:88:6f:24:1e:24:
e8:98:d3:eb:5d:e6:f9:ab:ff:a8:ff:f9:2f:f3:2c:ab:52:b2:
5a:36:5a:e8:ba:ed:c4:6d:aa:ad:27:f7:c0:09:d9:bb:27:19:
f2:03:15:a3:06:95:6f:16:db:0e:ab:21:58:51:96:69:45:3c:
a7:3d:31:9b:44:48:14:22:1a:18:e2:f9:04:e5:63:07:84:de:
9e:07:8e:21:b9:82:27:67:89:5c:9b:ef:9d:9f:4d:7e:5f:6f:
cb:c9:99:76:43:99:c9:7d:3c:18:9f:4a:29:49:40:15:ec:74:
98:bd:fc:50:b2:d7:1b:3e:53:07:a5:83:ec:34:5d:06:be:ee:
d9:4b:50:93:71:df:95:a9:03:dc:9f:fd:41:a8:ae:9a:85:02:
f4:30:2f:27:70:70:d6:25:86:42:fa:71:6d:93:33:e7:cb:13:
c7:c5:fe:1a:ca:64:65:9e:e7:60:ee:f9:90:4c:09:c2:23:2b:
1a:5c:ce:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:52:23 2025 by rpki-client