Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/fd3bf4b9-05eb-3f49-bf29-aa2ec061e71a.roa
File: fd3bf4b9-05eb-3f49-bf29-aa2ec061e71a.roa (raw, json)
Hash identifier: NvNNoLYIwpBAPxXONPK5l5dXRsqxCQeqssfterMQb1E=
Subject key identifier: 8F:97:E3:0F:29:9F:41:23:A0:0B:66:B0:46:8A:90:32:84:38:EA:41
Certificate issuer: /CN=2e06fcf2-dda2-4ce0-8a33-46133120abec
Certificate serial: 010D0C9F432858486AC59A6BAF2B0962397E2E80
Authority key identifier: 41:0C:10:D1:1F:D3:4F:C8:5D:4B:DD:55:92:B3:76:1E:FD:41:34:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/fd3bf4b9-05eb-3f49-bf29-aa2ec061e71a.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 999
IP address blocks: 208.89.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9a:6b:af:2b:09:62:39:7e:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e06fcf2-dda2-4ce0-8a33-46133120abec
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=23e16693-7ce0-4373-8804-646562b2bebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:85:2e:3b:96:81:e2:dc:d0:15:ed:c5:2e:
06:3e:67:66:75:a8:6f:3b:30:7c:51:ec:b2:d2:b5:
f8:23:9b:25:6e:5e:5b:07:79:d5:a4:ef:5a:39:b6:
04:c6:34:f0:61:4a:17:37:43:06:e3:69:4e:4f:82:
1b:dd:9c:7f:dd:8a:85:13:d7:fc:c7:4b:85:5b:da:
31:45:06:03:7f:59:05:83:8a:cd:2c:e5:e4:69:6b:
8b:08:5f:ff:7e:28:c2:7c:6a:53:a4:e9:53:63:19:
b7:14:ba:15:6f:ab:2c:60:c3:e1:59:7f:e3:aa:15:
e4:c6:c9:6e:85:56:57:69:66:c4:f7:57:16:ff:9e:
89:ad:44:51:31:dd:2b:10:c5:e0:c1:08:d0:35:fe:
47:14:a1:f0:22:15:39:76:e1:3f:7a:72:5b:15:74:
ba:df:f4:bc:56:e9:e2:99:55:f1:89:8e:b7:21:52:
ff:9f:c1:cd:47:5c:16:27:90:f0:50:2b:8a:86:87:
89:da:d6:62:1f:8b:38:ba:98:31:24:d3:3e:41:04:
b7:4f:7d:72:7a:50:09:96:3a:67:aa:65:d8:f6:a7:
d1:4d:92:d5:3a:f1:f2:6d:7b:19:ad:2a:0a:cc:bc:
5c:8d:95:49:64:e2:8b:50:61:a5:7d:c8:17:67:73:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:97:E3:0F:29:9F:41:23:A0:0B:66:B0:46:8A:90:32:84:38:EA:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/fd3bf4b9-05eb-3f49-bf29-aa2ec061e71a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.crl
X509v3 Authority Key Identifier:
keyid:41:0C:10:D1:1F:D3:4F:C8:5D:4B:DD:55:92:B3:76:1E:FD:41:34:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:9c:d3:d1:74:a7:1a:fc:13:12:9d:f6:c3:8e:b5:2b:77:d9:
f8:82:aa:87:41:19:a4:01:45:e1:22:df:e6:af:09:35:e0:29:
28:db:72:26:4a:21:47:d1:cf:7f:d6:35:40:9e:b7:76:d5:ad:
95:65:d5:f1:79:55:59:bc:08:e4:37:a6:96:38:a1:ff:61:90:
4e:0d:25:a9:19:6f:38:3c:44:11:f2:2e:d0:c7:f1:ea:b8:6a:
2f:40:5e:ce:2d:45:1b:a2:a5:dc:41:d9:2a:3a:10:e7:05:4d:
b4:85:d7:47:32:5d:4b:a4:a9:4a:c0:24:6c:ff:73:c7:c4:ff:
c5:91:92:b5:7d:2e:f7:01:28:66:fe:cc:dc:5b:24:94:9b:58:
24:dc:b6:ae:a1:ee:2a:ed:0b:77:88:88:d5:52:dd:7b:74:04:
a3:1e:12:86:fe:64:66:e0:33:c4:09:b2:72:7c:40:37:a3:aa:
d9:2b:fa:1c:4e:38:c7:a6:b1:6a:65:69:5a:04:80:eb:14:c0:
d7:27:58:25:4a:66:c3:58:45:01:76:bd:90:a8:9a:4b:8a:3c:
94:08:6b:f2:3d:db:52:91:21:54:61:9e:e1:80:12:bc:26:1f:
de:dc:a3:21:9f:db:00:42:d8:0f:1e:2c:fc:83:52:70:6a:16:
63:f8:11:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:52:52 2025 by rpki-client