Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d4693619-dbd0-388d-895c-e93673e5594f.roa
File: d4693619-dbd0-388d-895c-e93673e5594f.roa (raw, json)
Hash identifier: grmHQeylQj8MfsCxcIvfyfMaByArBquAfPue9/MtERI=
Subject key identifier: 60:01:7B:DE:03:47:62:5F:DF:0C:F4:2A:6A:37:E8:E2:36:F0:CC:45
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F43285847FC7F942F13C989D9CABCBC80
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d4693619-dbd0-388d-895c-e93673e5594f.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 1239
IP address blocks: 208.19.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:94:2f:13:c9:89:d9:ca:bc:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=09409b2a-56c9-408d-b4dc-d74ae3973a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:d3:88:3a:f1:b6:07:0e:e0:60:88:be:21:
c3:43:e2:a6:62:7d:fd:96:b1:06:9c:aa:1b:b7:6f:
4f:5c:06:f6:36:2d:00:8f:eb:2a:f4:9c:77:fe:f6:
88:e6:93:3c:19:ea:a9:51:50:ea:9d:c9:a1:b2:f8:
f6:8a:6c:b4:6a:b7:bc:bc:74:87:77:78:93:53:20:
d1:bf:27:16:e8:57:2d:43:00:d6:f1:b7:be:57:9a:
18:9d:3b:85:b1:cb:c5:af:ca:21:f2:7f:1f:df:fd:
a0:ba:ec:1d:de:41:d6:b5:0e:ca:53:48:b2:f6:a5:
38:69:29:a3:c2:de:78:cd:5e:0f:a0:13:83:47:86:
00:41:fa:a3:59:40:dc:3d:9a:67:4f:a3:81:0c:05:
d9:75:30:62:88:99:5e:dd:8a:6f:3e:2d:9d:ef:41:
f4:68:03:6f:34:e3:76:4a:76:3b:06:a4:cc:b0:69:
1b:7a:1c:d8:cd:16:c4:0b:45:3b:ed:1c:bf:f6:db:
33:fa:8b:f8:98:92:9e:8f:8f:24:92:a1:b7:0d:36:
de:1c:01:86:72:9f:0f:22:a8:5c:f0:3a:62:3c:94:
3a:c0:ab:04:43:00:3f:f0:33:6b:69:54:30:33:f0:
28:57:21:b6:82:56:7a:86:e7:01:f6:e0:9f:0c:5d:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:01:7B:DE:03:47:62:5F:DF:0C:F4:2A:6A:37:E8:E2:36:F0:CC:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d4693619-dbd0-388d-895c-e93673e5594f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.19.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:75:e9:ca:99:2c:5d:26:ac:dc:d5:aa:76:4b:84:c0:c8:58:
7e:92:8e:33:ee:e0:ec:cc:c8:1e:55:bc:86:4a:bc:ed:5e:d9:
a0:0c:32:90:bd:70:2d:4d:a2:46:0d:ea:1f:d3:b9:6b:1e:ee:
8b:c3:7d:01:9e:9e:10:a7:11:81:71:bb:4c:45:9f:3c:de:c7:
86:1f:f0:bb:01:66:92:55:5c:85:45:40:01:80:18:e5:f4:ec:
e5:d8:3a:96:99:39:6f:b3:a6:22:2b:cf:f1:bb:0a:ea:ac:2b:
50:45:8d:2e:2f:7d:f8:03:6e:f3:a5:2c:bf:9f:0d:db:1d:37:
24:f4:80:a0:e8:eb:4d:42:7d:76:40:90:df:a5:b7:f9:e9:4f:
dc:1c:c3:27:33:3a:82:6d:37:23:8d:bb:52:10:db:ca:fe:17:
33:8b:dd:0f:35:0d:11:3d:ae:7f:82:34:43:8d:1a:42:66:40:
b3:c9:c6:e2:d5:b9:c4:26:e6:0f:b2:4c:f9:fc:e4:54:c2:63:
1f:af:36:44:69:4f:75:5d:c7:ac:0d:40:c9:7a:31:94:07:ff:
1b:85:01:05:95:1b:b6:61:0c:77:1c:cd:0b:89:3b:81:1c:a2:
b9:f0:46:22:fa:9f:4e:b2:7b:c1:9c:a9:71:57:b6:17:e8:af:
8c:44:6b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:19 2025 by rpki-client