Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa
File: 0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa (raw, json)
Hash identifier: 6uZVA0lgZRjcn/qlf7toSuWf0TqSfsozAqvD1OjrMqE=
Subject key identifier: 4C:CB:D1:CF:FF:F4:B9:9A:6C:5A:E2:23:4F:72:65:70:34:F8:5D:F3
Certificate issuer: /CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
Certificate serial: 010D0C9F43285848388547AB15037E385C06ECC0
Authority key identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 40100
IP address blocks: 208.68.156.0/24 maxlen: 24
208.68.157.0/24 maxlen: 24
208.68.158.0/24 maxlen: 24
208.68.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:47:ab:15:03:7e:38:5c:06:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=3e9edcd3-84bd-4969-b831-6c984186222b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:d2:0e:16:79:46:e9:c1:13:ce:f4:1d:2a:
c9:62:c2:02:ed:6a:ce:8a:03:39:54:cb:c2:5f:78:
9c:0f:5e:e8:92:4b:f0:86:ec:c9:4d:13:5a:cb:82:
d6:39:c3:99:a4:06:10:da:1e:71:f8:23:2c:f3:51:
35:ad:78:f1:68:35:a9:ef:28:e2:92:f0:50:33:35:
18:46:44:25:90:19:af:19:9e:fe:e1:87:90:69:fc:
0b:05:d5:8c:93:45:90:e9:4c:77:db:80:50:8b:f8:
b0:34:37:4e:c5:e2:a8:9e:85:9b:4f:27:43:db:06:
de:c4:31:24:25:f8:6d:a2:a7:98:ac:0e:34:2f:53:
6a:36:ca:35:bb:7f:db:dc:79:39:03:87:5c:4a:ff:
df:4f:72:24:af:69:99:da:25:cb:23:e2:ad:c9:79:
e8:05:11:2f:82:b9:b5:95:f0:b6:e1:92:39:f5:7f:
fd:68:fe:26:1c:d8:90:2a:c3:85:1a:80:96:71:29:
34:75:fb:22:e4:4a:e1:33:17:68:f2:43:51:d8:90:
4e:bc:5a:96:0e:ec:01:f0:87:64:3a:72:76:aa:47:
62:12:50:63:b9:62:6b:23:3b:2e:9a:bf:76:fd:f9:
53:12:f5:83:52:fc:f7:cc:43:a9:98:6b:a9:74:7a:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CB:D1:CF:FF:F4:B9:9A:6C:5A:E2:23:4F:72:65:70:34:F8:5D:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl
X509v3 Authority Key Identifier:
keyid:64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:25:97:86:45:2b:9f:a8:81:5c:ce:4d:49:c4:df:3c:87:6a:
6c:5d:21:42:e3:2c:7c:91:17:29:d8:55:aa:2d:43:d1:d9:8d:
f8:34:3e:90:38:f0:16:91:9e:5b:1f:7c:dd:84:fd:ea:e5:c6:
9c:08:9f:2a:67:86:fe:64:17:63:9b:ba:7d:8e:88:68:d8:e8:
05:0f:0c:73:4a:fa:b7:d7:ce:25:54:cd:e6:89:23:12:bf:36:
f0:f3:12:b3:92:a4:b9:64:f8:3a:25:06:16:d0:78:4d:c4:5a:
41:99:92:f5:df:11:29:7f:d9:1f:1e:4b:a8:04:a5:46:5d:f8:
87:d5:1f:b0:7d:e2:ab:60:db:57:ff:81:62:7f:fb:69:86:7c:
c0:71:6b:26:ab:d7:4a:32:dc:09:12:2b:54:7f:66:31:31:6b:
f2:e0:b4:bf:ee:50:d4:1a:91:10:3d:af:52:0b:39:3c:b2:24:
7e:ce:f3:7f:04:42:12:3c:73:03:24:51:3d:7b:6e:0c:db:74:
41:c4:ed:75:08:cd:e8:27:1b:35:85:c8:09:fa:52:bf:c2:ec:
31:5e:40:1b:16:64:2a:bd:79:a6:7e:8d:17:71:be:87:d4:b2:
15:4a:9b:63:05:c8:79:5a:50:60:d1:4b:5e:45:ec:21:61:a2:
41:ff:64:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:16 2025 by rpki-client