Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa
File: 468e47db-5e5d-3b56-8599-c0d6de193ee1.roa (raw, json)
Hash identifier: ISLHVmfOXklwioYEt/Ii4x7jyq2G4dib+VAuPfQocZE=
Subject key identifier: 8A:50:8A:5D:DC:76:C3:71:81:5C:A2:86:29:72:0A:A6:C8:A2:49:A1
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584855D59BA388D8F7B50232EE80
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 25645
IP address blocks: 208.85.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:9b:a3:88:d8:f7:b5:02:32:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=fbc75651-e9c5-4034-a70d-03b656a81b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:d6:2c:23:e0:4f:0a:7b:7b:31:1a:bf:9e:
62:51:f9:62:a2:0d:dc:19:e4:eb:d7:a5:8d:1f:b7:
a7:43:83:cc:f4:db:a1:ba:59:31:9b:ad:1a:65:0e:
7f:6b:e6:9d:79:9d:b9:59:0e:bd:40:ed:24:2d:1e:
b8:8e:5a:4d:45:12:eb:83:0e:c1:88:86:a7:d0:54:
dd:5d:54:73:56:bc:41:02:78:c4:f4:36:c5:68:6d:
8e:e0:de:8f:08:0f:dc:f7:1b:68:71:b9:98:3d:b7:
ca:99:21:40:de:70:86:7d:e1:af:28:84:cb:39:c0:
90:d8:52:30:2f:81:81:df:13:e7:5d:b1:4b:0f:55:
04:6f:fb:0e:82:88:26:81:3d:37:90:fb:71:e0:fb:
f3:f8:81:c1:0a:16:13:96:57:d8:e9:03:f4:ec:60:
f7:fc:5d:9f:16:9d:a4:15:1d:d6:8f:94:30:89:7e:
c5:c1:24:ba:68:aa:aa:74:32:33:8c:ac:83:95:2c:
a1:82:d6:c8:f6:b0:bf:4c:57:46:8e:a7:fc:c8:06:
e7:ab:21:8f:52:42:2d:f1:7d:c8:7d:7d:67:b7:47:
d1:7e:0c:8f:11:19:80:07:e6:8e:02:89:9e:1e:a3:
f5:67:63:35:63:99:8a:0c:18:ea:c8:a4:9e:1a:3b:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:50:8A:5D:DC:76:C3:71:81:5C:A2:86:29:72:0A:A6:C8:A2:49:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
208.85.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:d9:de:dd:06:d4:a7:68:0d:a1:86:e3:c9:81:36:1d:d6:30:
50:f4:6c:1c:93:33:0b:f2:d8:23:95:e8:a3:20:ac:5c:19:14:
cc:01:38:81:fe:b7:88:3f:1d:fd:9b:23:d2:55:68:e5:f8:c0:
b7:fd:8a:65:49:ad:f2:0c:5b:89:5e:82:cc:8e:00:a8:39:a3:
7d:47:4a:9f:b5:a1:f6:2f:21:b9:73:e8:b2:42:46:44:47:12:
3b:be:36:83:99:a0:40:dc:c0:26:76:56:62:9b:ba:e0:0c:b0:
31:b8:a1:23:d7:7b:af:f8:ee:09:9b:34:b9:40:3c:c8:42:b6:
f3:5b:38:17:c7:59:c5:79:de:3d:be:fc:5c:62:6c:0c:fa:e3:
9d:34:fb:63:62:c0:42:fe:84:7f:17:c0:eb:8a:5e:78:1c:a6:
9f:98:36:bd:7d:37:2a:e0:0d:8d:5d:89:e8:99:2c:f7:56:16:
f0:ab:5d:4c:4d:8e:d3:e5:b2:b4:f1:9f:17:5f:c8:f0:ad:5b:
08:cb:5f:a8:f1:64:95:f3:96:58:7c:54:99:c6:23:0a:22:d1:
23:b0:a3:c1:60:44:22:3e:80:7a:76:dd:3b:d8:cc:5c:81:1a:
5d:8d:f6:91:75:4b:a9:dd:d5:db:c5:7e:cd:5a:3a:35:56:5a:
22:2f:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:04:15 2025 by rpki-client