Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/cb6eb617-0bbe-30e3-b5b4-57836fcc5e67.roa
File: cb6eb617-0bbe-30e3-b5b4-57836fcc5e67.roa (raw, json)
Hash identifier: YwTF/W6LOiiD6DKuOQwvo9XO88RLDom9qQ7yWAOMnVU=
Subject key identifier: 58:3F:01:ED:60:1D:A8:E8:9E:34:78:F5:02:35:B4:80:74:0E:76:48
Certificate issuer: /CN=5c9821b2-602d-4808-a33a-b2390c4ea020
Certificate serial: 010D0C9F432858487A208E9127D216E887E05480
Authority key identifier: AF:66:D3:67:41:8C:19:F4:CC:35:CC:01:7B:B6:81:8F:8B:D7:4E:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/cb6eb617-0bbe-30e3-b5b4-57836fcc5e67.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 46829
IP address blocks: 208.75.132.0/22 maxlen: 22
208.75.132.0/23 maxlen: 23
208.75.132.0/24 maxlen: 24
208.75.133.0/24 maxlen: 24
208.75.134.0/23 maxlen: 23
208.75.134.0/24 maxlen: 24
208.75.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:8e:91:27:d2:16:e8:87:e0:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9821b2-602d-4808-a33a-b2390c4ea020
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=a2561e66-1fca-4b37-b287-2b059277478d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:40:28:c3:ae:66:0e:01:96:fa:00:fd:75:
60:d8:05:49:82:71:bb:39:15:0f:a8:1f:7e:00:7e:
20:70:69:7c:64:c9:2a:98:1e:46:5b:60:c2:e5:b8:
df:f2:75:cb:15:b2:2e:41:21:ad:fb:45:ab:b2:cc:
c3:52:ed:5f:2a:d6:67:ae:51:0f:11:b3:6c:d5:58:
64:4c:14:fa:80:15:43:70:f1:81:f9:c0:35:94:63:
43:52:03:44:f0:05:7b:8a:69:68:61:da:df:c2:4c:
7d:15:9c:8c:56:4a:10:c2:5d:dc:8c:25:06:6d:db:
3c:0b:dd:d0:b3:58:be:c8:82:bb:23:89:d0:7a:d9:
be:49:e9:2e:ee:47:84:26:e3:b4:4a:99:bb:2f:aa:
6c:97:f8:ee:6e:6f:88:3f:3b:9e:d1:4c:b8:fb:39:
f7:22:9f:e5:6a:cf:98:8d:ad:f7:39:bf:b8:05:6a:
5a:71:8f:59:81:0f:80:37:7b:b5:de:25:78:bb:0d:
31:e4:dd:dc:e7:88:00:17:d3:82:d0:cc:07:55:19:
7a:6d:fe:6d:fc:72:a0:f3:31:e1:76:e2:5a:81:48:
1a:7e:cc:0c:c5:18:cd:e9:bf:f6:f6:98:c8:cb:20:
f1:9f:26:a1:6e:97:77:f7:6a:5a:ab:6a:fa:50:f9:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3F:01:ED:60:1D:A8:E8:9E:34:78:F5:02:35:B4:80:74:0E:76:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/cb6eb617-0bbe-30e3-b5b4-57836fcc5e67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/5c9821b2-602d-4808-a33a-b2390c4ea020.crl
X509v3 Authority Key Identifier:
keyid:AF:66:D3:67:41:8C:19:F4:CC:35:CC:01:7B:B6:81:8F:8B:D7:4E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020.cer
sbgp-ipAddrBlock: critical
IPv4:
208.75.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:7f:44:cc:5e:87:e2:85:e2:40:07:c2:81:ea:db:1b:fa:c1:
5f:9e:63:76:71:13:4a:1f:f1:6a:c4:4d:87:10:5e:8b:9b:80:
df:a0:10:b0:06:2d:88:0a:4d:09:3c:a4:a9:52:fa:46:20:72:
d0:70:d2:e4:48:0f:90:fc:78:f3:01:a6:52:53:de:6e:06:c5:
12:ba:38:fe:8c:e6:ad:78:0f:90:ff:ad:4b:3e:c1:f7:b6:8a:
a5:7f:da:42:e0:12:82:47:e9:42:d5:84:4d:bf:5b:47:d2:19:
f6:ab:fd:83:33:90:49:9e:91:6e:19:cd:e1:e2:bb:71:3c:1d:
ce:aa:79:f4:02:bb:6c:43:82:d8:b1:1f:42:ec:37:25:c9:22:
f6:c4:a7:f3:86:dc:89:e7:60:d5:6d:82:2b:6a:70:0c:53:eb:
3c:94:c1:9c:33:8d:ff:be:61:db:9e:a4:c7:d9:2b:16:ae:88:
91:9b:11:c4:36:b5:0c:77:30:7b:1f:3c:38:dc:e7:24:6a:ed:
9e:be:c6:ba:6f:21:6d:aa:38:c2:d2:6d:3c:bb:2f:49:98:56:
c3:6d:85:c3:3e:9a:ba:19:86:08:96:e0:6d:76:6b:87:67:86:
b0:be:7c:f5:3c:bb:3b:60:f3:11:a1:fb:62:3f:b2:8e:03:01:
28:40:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:12 2025 by rpki-client