Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa
File: e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa (raw, json)
Hash identifier: MMnj2WXn5SEbu9xRn1GXeu/c6f0n5GB/xWEJIXy7L2c=
Subject key identifier: 33:DB:84:89:A4:AD:B7:7A:81:B9:20:FD:7A:85:41:4E:7B:C6:A5:FB
Certificate issuer: /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial: 010D0C9F432858487325B5DF9BCE372779F01F40
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 16509
IP address blocks: 208.70.136.0/23 maxlen: 23
208.70.138.0/24 maxlen: 24
208.70.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b5:df:9b:ce:37:27:79:f0:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=84bd8cc5-67a6-4d14-922d-f4636ac1b18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:f6:ef:92:ee:0c:11:96:1b:72:ca:b3:e3:
a9:3b:50:cd:52:23:55:f7:9c:dd:95:f2:47:be:77:
ad:f8:b0:a9:f4:d2:71:18:f0:f9:3a:b5:c1:bc:d8:
44:c5:62:c7:09:39:be:97:c4:a4:57:16:cd:20:6b:
17:c4:5f:a5:5b:a2:ed:0a:c1:f6:72:92:4c:89:1c:
76:2f:e0:12:32:8d:79:00:f3:53:0b:eb:c7:3c:07:
63:6b:fb:5f:a2:af:58:7e:1c:0e:f3:aa:d0:55:72:
ed:fe:80:c0:1a:29:5d:7f:62:1b:70:1c:8c:54:ae:
29:8e:50:c0:fc:f8:92:ab:0b:70:b5:ad:07:67:cd:
83:f3:e1:66:a2:af:19:fe:e1:e9:30:50:7a:dc:dc:
03:83:37:5b:42:e8:03:da:d6:dd:b3:c7:6e:9c:07:
b9:68:9e:8f:c8:c1:67:b5:79:d4:bc:25:70:f3:47:
80:8f:b6:3c:d4:86:a8:ff:5c:e0:ab:9c:0b:da:f7:
fd:6d:4c:ff:a4:96:6f:0c:1d:cb:0d:7a:f5:94:63:
35:8f:6f:4c:bb:0a:b8:e6:b9:dc:53:cd:27:6f:83:
c0:00:a2:09:3c:72:16:ce:69:04:46:18:6c:41:9d:
89:2c:44:58:7d:0f:2e:42:a7:25:63:a4:6a:37:7b:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DB:84:89:A4:AD:B7:7A:81:B9:20:FD:7A:85:41:4E:7B:C6:A5:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
X509v3 Authority Key Identifier:
keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:a2:c6:2c:9d:1f:07:7e:54:d9:56:11:7e:c3:09:d3:87:f5:
c7:33:f8:81:ba:56:0a:48:16:b3:0d:a1:be:c1:2d:df:3b:c6:
8e:e8:0a:71:28:12:63:f1:95:e3:c9:4e:59:b6:ef:58:95:2b:
a5:88:3d:92:bf:d3:ff:2a:f1:66:a6:9e:6e:5d:28:36:16:64:
e2:bf:72:54:8e:83:3c:e5:fb:da:29:ca:76:4f:a3:0a:ba:91:
53:98:fe:21:61:b0:de:b9:f4:0a:f8:c6:29:44:64:b0:f8:74:
dd:ad:2a:38:ed:dc:73:1e:a8:bf:46:9f:c8:77:9d:5a:91:d0:
8a:d6:6c:45:7f:ae:d8:16:39:d1:5d:cc:86:4f:4b:bf:98:75:
ba:45:c9:67:60:99:22:bb:18:94:7c:cf:72:d2:c3:0c:03:1c:
d6:7c:ee:8f:d9:ef:98:fa:b8:ab:6f:cd:5c:80:22:a5:17:15:
22:f7:7c:9d:ad:c1:26:aa:5a:7d:a5:d4:11:0c:21:5e:59:37:
71:d9:63:91:43:b7:76:d0:8d:c8:3f:e2:03:6f:c9:4a:c9:09:
74:2d:10:36:86:c0:e0:be:e8:41:d6:97:f6:e4:84:69:ba:22:
c2:f4:25:28:99:10:91:af:5e:a2:45:7f:02:eb:1a:a2:17:66:
4e:74:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:45 2025 by rpki-client