Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa
File: acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa (raw, json)
Hash identifier: LphdXrGj1/foDIBWzd9RffDQMNlI1A9WJpoO+MUtCJo=
Subject key identifier: EB:6A:15:A0:91:42:C5:81:F9:63:2E:5A:93:CB:74:EE:B1:68:D5:53
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F4328584882808CE847598BF2A0F70D40
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 13536
IP address blocks: 208.20.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:8c:e8:47:59:8b:f2:a0:f7:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=141e3138-945f-4a93-aa57-5ed02af45356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:23:06:2b:da:2b:f0:df:3a:ae:43:c6:d4:90:
7d:3a:aa:5e:49:bf:78:8f:1e:88:9d:2a:c3:0f:fd:
7e:15:94:a0:3e:bc:d8:d1:85:66:99:81:e6:6a:6d:
be:0e:89:40:91:d0:4a:5e:28:2e:ef:76:02:9a:9a:
12:13:68:b1:8b:9a:18:eb:c8:7f:f9:a3:fd:56:e1:
a6:56:69:e2:73:a7:e7:b9:e5:38:53:20:5e:72:6f:
f5:3b:72:14:5a:65:01:69:86:89:90:f9:be:a8:bd:
60:12:11:49:91:34:2f:66:7a:88:7f:49:76:dd:e3:
6f:62:eb:95:2b:00:a9:b3:20:fb:c4:3d:81:6a:bb:
09:d7:f5:00:43:d5:d3:7f:af:ba:18:3a:ab:c4:d8:
18:da:01:40:43:e3:56:5d:8e:52:76:89:92:d8:b3:
d3:6b:df:8e:c4:70:86:4f:fc:1a:b7:ee:d5:3d:e4:
4e:42:b0:98:28:ca:fe:c7:10:62:8c:5f:d4:9c:a2:
fa:7e:11:7a:d0:34:06:7a:6f:6f:06:4d:f1:9d:99:
88:e0:b5:da:be:6a:3f:28:87:61:82:86:ef:73:24:
27:4c:49:19:af:ef:16:f8:b8:63:20:82:e3:4d:a5:
2c:df:81:b6:21:cd:f6:34:26:a7:9c:7f:85:0b:9e:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6A:15:A0:91:42:C5:81:F9:63:2E:5A:93:CB:74:EE:B1:68:D5:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.20.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:85:59:04:65:c7:ee:d4:2f:72:b2:bc:2f:13:1c:f2:d0:62:
69:01:b6:7f:d2:63:8e:96:3c:fe:9f:b2:23:38:5b:96:62:6c:
35:c6:13:28:c9:f5:d5:1b:41:a5:01:86:75:6b:50:32:db:60:
45:07:e0:ab:2a:f6:de:97:be:07:e6:c9:fc:c4:aa:b3:64:c6:
36:35:cd:0f:27:ee:39:46:74:d7:5c:93:67:dd:88:38:bd:ea:
7e:17:4f:e7:bc:66:48:88:91:9a:59:0a:6a:ce:5b:47:77:8c:
26:df:8a:6d:12:42:4c:ad:1f:c3:ff:7c:86:fc:e7:9a:91:1a:
3d:f1:d0:22:75:84:f9:f6:73:33:de:8c:33:69:60:a2:b7:ee:
66:89:a9:50:93:dc:b5:f5:f5:a3:7f:34:f4:77:b5:54:24:21:
cf:06:99:23:a8:44:b2:6d:53:9b:49:76:14:c5:11:07:8d:9a:
26:ee:45:6b:04:55:54:9e:de:5f:a8:28:7a:ea:10:54:9e:ac:
c8:b4:c4:94:d8:78:b3:53:2b:0b:88:a0:61:aa:b6:ca:b8:00:
98:86:46:b2:a3:8e:ee:95:c6:c4:1d:43:78:fe:41:25:c9:ad:
1d:b4:53:63:a1:91:af:43:e6:dd:9f:f4:6b:21:52:97:8e:11:
62:5a:04:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:36:05 2025 by rpki-client