Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa
File: a0241a87-ee63-3ca4-8762-01bd022707da.roa (raw, json)
Hash identifier: g2S892M3nlqtFD7gfEKNlQ91TaJ73gCOEmC42FDZT8M=
Subject key identifier: B5:AA:18:21:B8:3D:F1:95:15:2E:CF:58:04:7C:1F:09:ED:EF:51:FE
Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d
Certificate serial: 010D0C9F432858488815E74E44371D1C5FF14800
Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 8075
IP address blocks: 208.90.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e7:4e:44:37:1d:1c:5f:f1:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=f0d39c1d-6b96-45b4-be6d-12423039fc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:78:bf:f6:8e:28:46:e7:3e:23:13:78:8a:
65:46:2e:a9:30:bf:a4:68:ea:e4:50:07:19:b1:fe:
db:44:91:9a:d3:1b:7b:33:70:f5:79:ee:54:82:2a:
9a:0e:8c:43:0c:32:68:1b:fb:ea:b3:42:76:b8:18:
8a:c3:db:e3:e1:e4:3b:fc:2c:fc:ff:74:c9:dc:ad:
fe:7b:79:a2:96:9d:4d:ef:21:11:0c:e3:5f:75:90:
df:86:fc:69:ac:98:0a:0a:45:73:94:90:9d:85:2b:
12:ac:56:f6:98:0b:e4:94:44:2f:ba:b9:00:71:4f:
8d:74:73:e9:90:35:e1:b1:b9:9f:5c:06:fb:0f:21:
da:f8:cf:e6:c8:5e:f1:d6:a6:53:12:96:9b:9d:1a:
0c:92:8e:0c:e3:3a:d8:a1:b0:f4:52:eb:44:92:78:
1d:55:93:15:bb:10:35:0e:9f:d2:44:e1:02:9f:a3:
c9:21:68:26:2e:55:64:82:d2:31:1e:c3:b8:e5:ea:
f5:8d:f8:c6:59:35:89:ab:33:59:94:95:4f:c5:34:
27:8e:c9:bf:6f:94:6d:4e:66:19:fd:d3:8d:fd:89:
4d:0d:63:85:92:b9:73:0b:eb:75:21:56:7a:fc:3e:
fa:55:ab:8c:13:16:5a:bd:30:7a:6e:c8:c5:b8:4e:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AA:18:21:B8:3D:F1:95:15:2E:CF:58:04:7C:1F:09:ED:EF:51:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl
X509v3 Authority Key Identifier:
keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.90.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:de:19:31:50:28:55:9c:47:cc:8a:cf:1c:97:3d:93:68:16:
00:f3:3f:32:43:a1:54:f7:c7:d5:cd:a6:a2:c3:75:b6:cc:23:
eb:a0:e9:e2:d2:fe:2f:5a:b2:30:5f:a7:41:be:e9:5b:c0:a5:
2c:06:36:d0:41:ea:ad:2f:db:8e:92:10:00:36:ca:1e:ea:59:
9d:65:8c:26:2a:7a:16:04:c1:1d:9f:e9:8c:de:8e:0f:39:8d:
39:b8:5d:13:cd:1f:d8:7f:1d:2a:f3:cd:2e:67:de:eb:56:48:
f9:90:55:af:d5:0a:3e:03:4a:fc:b9:78:63:3b:42:31:04:4d:
bb:ff:f9:2a:de:f7:4b:f8:20:69:f5:ea:32:92:13:5a:8e:23:
fa:c6:a8:ef:62:28:0e:dc:ec:ae:b8:c0:32:c3:9b:36:5d:f9:
d5:8a:b9:95:7c:15:b5:63:ed:04:fa:19:82:4d:a3:ea:18:66:
18:f3:23:d3:91:85:be:ee:15:e9:69:1e:42:41:02:d7:0b:73:
f7:5a:a9:e4:c4:a0:3c:7e:25:a4:f8:34:c7:34:6f:41:24:d6:
23:4f:10:f9:30:e8:c4:31:6f:ea:21:bf:5c:88:ee:f8:4e:24:
61:04:28:96:b3:d3:62:34:1b:bf:4e:cc:cc:16:36:4c:af:07:
e9:fb:d6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:23 2025 by rpki-client