Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/a0012c73-5379-3986-9459-b361a90bcb87.roa
File: a0012c73-5379-3986-9459-b361a90bcb87.roa (raw, json)
Hash identifier: SMFlAWQusw9G2GhaykdIMAf2QDjDldx2wxsYoeDoKSo=
Subject key identifier: 68:2D:77:38:89:05:AA:58:47:4B:E7:A5:2F:45:48:DF:EA:9D:4D:BE
Certificate issuer: /CN=c0ae1cff-309c-40d1-9760-3a89a481e998
Certificate serial: 010D0C9F432858480BDA66E91C74656594646980
Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/a0012c73-5379-3986-9459-b361a90bcb87.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 14907
IP address blocks: 208.80.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:66:e9:1c:74:65:65:94:64:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=bb28b3ee-35f6-45e5-a515-11177abad5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:37:a1:23:b8:29:dc:4b:3a:84:9a:0e:6a:
47:58:4a:20:0a:d4:55:69:d2:01:35:90:74:58:a1:
b4:4b:2b:55:e0:25:cc:83:f4:fb:e5:33:48:9c:d1:
e2:3a:48:88:52:15:88:7b:ec:f6:b7:53:56:0d:88:
b9:63:14:6e:8f:ed:51:1f:47:4e:12:27:d8:35:e2:
a0:f3:e6:73:6e:5e:ec:76:92:76:e5:b1:f1:b2:9d:
d3:68:64:3f:62:80:a6:9c:ae:53:98:16:93:bf:0b:
cb:34:2a:fb:a7:89:02:31:5b:b5:3d:43:39:c6:64:
a9:fd:6d:a6:df:34:f5:97:13:fe:41:c4:12:9f:13:
95:5e:bc:8e:9a:95:7e:3a:21:ee:a3:6d:de:0d:e6:
cb:ab:b9:86:f8:60:0e:e1:e9:94:6f:f5:36:e1:19:
f6:bf:be:dd:92:42:04:dc:b1:a2:c6:c5:8e:fb:07:
52:d5:8b:21:47:cf:78:12:4f:7b:6c:58:15:39:8e:
24:21:ce:05:28:a9:fe:df:26:9e:90:49:ca:12:e8:
de:27:2a:3b:ed:6d:31:ac:28:fd:ff:b4:35:a3:2c:
6e:f7:30:c1:90:11:69:e1:d2:09:c7:c2:73:f0:85:
4f:e1:c5:08:7a:23:67:e0:f6:e1:9b:e4:af:2f:4e:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2D:77:38:89:05:AA:58:47:4B:E7:A5:2F:45:48:DF:EA:9D:4D:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/a0012c73-5379-3986-9459-b361a90bcb87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl
X509v3 Authority Key Identifier:
keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
sbgp-ipAddrBlock: critical
IPv4:
208.80.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:5d:8f:11:fc:44:21:21:6c:18:ae:2d:5e:66:c6:91:02:2a:
ab:e2:e8:7a:d4:f6:1b:4b:a6:ac:24:98:4d:74:95:5c:fc:0e:
b3:7e:a9:a1:82:a1:4d:11:d1:26:1d:f9:61:8b:45:5a:5c:57:
c9:8c:73:b2:ab:fc:52:b6:cb:53:6f:0f:d1:72:88:e3:6c:cd:
96:09:ad:43:35:7a:0c:04:15:23:b7:57:9b:3b:0a:81:33:50:
f1:f1:08:8d:c9:c6:f4:82:31:aa:76:6b:a5:69:7b:0a:2d:30:
4c:03:fe:e2:96:3e:5a:d7:0d:fb:d6:bd:ae:af:7a:9d:fb:c0:
50:5f:90:0d:dc:68:0d:b4:42:59:f8:d4:a5:d7:05:ba:85:9f:
99:82:b3:00:1f:41:64:1f:54:05:b7:98:c2:7e:47:9f:23:28:
84:55:f9:9f:8d:3f:65:e5:ff:ba:6c:9d:a2:ac:c9:19:c9:3b:
c3:d9:d5:1e:63:1b:37:dd:85:55:78:6f:3a:78:d7:5f:c3:4e:
10:97:d1:76:48:af:98:f2:15:46:f8:ff:43:f1:b9:ea:33:f1:
3d:b6:29:85:3e:cf:1b:0e:3a:de:e6:fd:f8:ae:18:ab:fd:72:
b2:a1:8b:63:af:16:5f:1f:63:e0:2c:0d:97:dc:32:f3:99:03:
20:8f:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:47 2025 by rpki-client