Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa
File: 99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa (raw, json)
Hash identifier: TiMY2B7bbJA359pPpz0fF4nJU9wvKe8TY+Pd9Bldn2c=
Subject key identifier: 17:AB:1F:36:C5:77:03:14:69:18:18:74:4A:B0:51:C3:38:70:B9:8C
Certificate issuer: /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial: 010D0C9F432858488815EB18A29F5A36F6D65E00
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 23675
IP address blocks: 208.70.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:eb:18:a2:9f:5a:36:f6:d6:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=aa25272b-719f-4693-aaa5-320d7771a602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:26:7d:98:da:2e:40:bc:35:2b:5a:21:41:
ec:d9:fe:b5:2e:dc:26:33:58:84:ee:2a:8b:95:51:
15:11:9c:0d:0f:4b:5c:c6:22:3a:bc:81:8d:57:76:
64:fd:bd:3e:c7:e5:21:64:fa:b6:82:fd:42:eb:7a:
a4:af:ea:00:75:5b:8b:99:96:e9:c3:c9:ca:9e:d6:
ec:1e:b1:72:bb:9f:77:c4:2d:e9:39:74:a9:e0:7a:
87:7d:e5:1e:a9:0e:9e:68:90:39:35:bf:ff:95:7c:
58:15:33:e1:48:b7:80:f6:1d:a8:88:bf:71:b6:6f:
13:f7:bf:18:ad:d8:85:73:a8:fd:b6:cf:a2:2b:0c:
07:e0:cd:13:84:ad:fa:7f:a3:9e:03:59:9b:18:bf:
0d:16:d5:82:ba:f1:37:36:36:88:c0:7d:8e:5e:a9:
d6:8f:f1:0f:ab:1a:77:30:fc:0e:74:d1:ab:c4:3c:
75:85:fc:c1:e7:44:2f:b5:1e:31:42:d1:8b:2f:55:
e6:ca:6e:52:a8:b3:50:bb:07:4c:a6:23:24:e1:db:
9a:2a:7d:1d:3c:4c:d3:b9:dc:f1:fe:bc:1f:a0:c3:
df:28:93:da:70:29:9f:2c:88:05:83:d2:a3:b5:68:
f0:d2:d6:6a:55:43:a0:58:ca:ca:62:95:68:44:ad:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AB:1F:36:C5:77:03:14:69:18:18:74:4A:B0:51:C3:38:70:B9:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
X509v3 Authority Key Identifier:
keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:83:b4:17:f7:53:5e:b3:29:c7:ff:88:89:62:16:f2:90:3b:
72:e1:45:56:62:3e:67:f4:64:44:be:f0:fb:40:b1:94:07:41:
d8:60:92:9c:ec:03:43:9c:af:6d:35:f7:81:ff:4b:f8:be:93:
b8:92:86:63:34:b5:af:f8:4e:19:9a:4d:6f:9d:fb:78:ad:5e:
55:49:22:8b:07:73:a2:ea:c5:e3:25:d5:99:fe:b5:96:ca:98:
dd:5c:eb:f0:52:ce:7b:1b:b3:bb:68:56:07:d5:68:c4:e1:9c:
b1:32:ed:47:73:ad:e9:fa:76:f5:61:fe:36:74:ac:88:64:48:
4c:40:a1:d4:a8:4e:b9:c0:64:e3:7b:7d:cf:dc:a4:3c:27:c9:
46:c9:8c:cf:ac:e9:fd:b7:28:df:de:ec:a9:10:db:35:77:7f:
a5:ae:f8:73:a5:dd:f9:9c:b6:0e:26:07:9b:b4:7b:6a:da:59:
9f:d8:2a:29:21:90:b0:fc:b2:4c:a3:2d:2f:bd:f0:45:7c:45:
7c:b6:c2:96:ba:58:38:ca:06:7d:bd:3d:46:c5:3d:3d:55:34:
5f:77:36:0e:15:89:64:ef:59:b1:6b:68:f1:f8:3a:3f:78:1f:
f8:21:7b:c0:18:55:d5:cc:cd:5f:48:ef:7f:5e:c4:eb:de:f2:
a8:a8:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:36:24 2025 by rpki-client