Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa
File: d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa (raw, json)
Hash identifier: gpHt8B4tMz7xhxP1SBCgUr40FF4viZluabK5mI1IlRU=
Subject key identifier: 19:46:72:34:CA:B7:30:4E:3F:75:88:8D:C7:67:DA:FE:A0:32:00:FD
Certificate issuer: /CN=34b1000a-ddde-44a7-ad9c-12d049acde17
Certificate serial: 010D0C9F43285848265FF80F7B42ECA9B746CC00
Authority key identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa
Signing time: Mon 09 Dec 2024 14:00:51 +0000
ROA not before: Mon 09 Dec 2024 14:00:51 +0000
ROA not after: Sun 09 Mar 2025 13:00:51 +0000
asID: 17103
IP address blocks: 208.90.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:5f:f8:0f:7b:42:ec:a9:b7:46:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b1000a-ddde-44a7-ad9c-12d049acde17
Validity
Not Before: Dec 9 14:00:51 2024 GMT
Not After : Mar 9 13:00:51 2025 GMT
Subject: CN=87ed8f7f-8ab8-4c29-b4a4-efd29cb3cf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:2b:9f:94:0f:f8:94:8e:30:5f:d1:c0:ec:
97:f5:bc:5f:ed:76:4c:28:31:9d:8c:8c:6f:44:94:
81:c1:3d:31:2b:c6:a8:67:82:95:59:a1:6f:2b:b0:
c4:bd:ec:d3:c5:75:8b:b4:98:37:60:3e:e5:45:06:
2d:97:07:b4:23:6c:c1:5a:c3:27:70:84:bd:ca:ef:
16:65:8a:a7:09:54:e0:12:ef:68:b6:ca:23:59:99:
6c:da:ed:28:16:44:5f:4e:05:0d:37:bc:a2:32:c1:
d8:96:4d:6d:e0:70:e0:7f:bb:dc:aa:69:d4:a4:95:
30:61:cb:6f:b1:0b:ae:ac:0e:c7:e3:90:b1:03:d3:
67:63:b9:d2:79:3a:65:90:ad:04:49:15:8b:5d:21:
b6:24:4b:21:74:df:dd:9e:50:ab:83:87:34:06:98:
b5:a7:04:77:cf:3e:52:19:5c:a7:8a:b7:f5:c9:f4:
27:99:ce:64:41:ae:53:c2:8e:d4:f6:e7:91:4c:03:
d1:7a:0e:86:3a:2d:0c:46:52:67:c9:b2:29:7c:38:
a5:38:3b:b9:ce:16:ba:dd:70:e0:9c:08:96:5c:e6:
46:6d:18:41:69:09:94:75:56:b7:aa:3d:98:97:5a:
fe:41:a8:9e:74:92:42:5f:26:e8:f6:d8:17:0d:6a:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:46:72:34:CA:B7:30:4E:3F:75:88:8D:C7:67:DA:FE:A0:32:00:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer
sbgp-ipAddrBlock: critical
IPv4:
208.90.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:06:10:31:38:5a:99:ea:6c:d1:fa:26:97:fc:24:62:3f:a2:
5d:5f:1b:f0:1d:b4:a0:70:fc:fe:1a:14:f7:dc:32:c0:04:af:
7e:bd:da:bc:eb:04:9d:5e:44:2e:c4:77:61:7a:81:80:e9:8e:
6d:46:b6:18:ba:22:5c:4c:82:d2:bc:89:78:43:41:24:0d:9b:
ba:01:f8:ca:9a:0e:e8:41:0b:e0:79:05:86:b6:a3:59:fd:28:
80:22:6f:7e:5b:27:7d:f9:f0:0f:b4:a9:5a:45:2e:d7:72:18:
aa:35:7e:dc:0e:36:9e:2e:37:cb:6b:d3:72:8c:e6:cc:06:07:
c7:65:08:f6:ca:41:ad:cb:07:83:1d:bd:65:ce:2d:36:11:13:
f5:6e:4e:e8:8b:dc:62:17:f5:3f:6e:99:99:4a:98:9c:ff:75:
8a:46:2d:74:2f:f4:e0:bc:c0:1c:0b:ba:3d:7e:94:e4:2d:70:
48:68:62:fa:6c:ca:7a:d6:9b:56:75:2c:70:40:2a:e9:0b:02:
55:18:01:80:44:12:24:f5:bd:18:26:8f:c6:35:f9:33:01:6f:
2e:15:87:ab:f9:2c:75:4a:23:f3:87:80:39:f1:24:a6:85:5a:
db:5f:22:f5:7d:1b:39:5c:97:8b:a2:14:e1:cb:a4:1d:13:f0:
4b:1a:ea:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:33:27 2025 by rpki-client