Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa
File: 8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa (raw, json)
Hash identifier: Q5oNmPLO24TXkT8iZ+eS5Ss7+HbqxtOG7TiwcnGFuHE=
Subject key identifier: C8:14:88:A1:33:8A:28:70:7F:A5:90:C6:32:A5:C6:BE:72:C7:DA:BA
Certificate issuer: /CN=a29a724c-0ef8-416c-bb2c-359a0122375e
Certificate serial: 010D0C9F432858485F9AE3BE5F9796BB5F16B780
Authority key identifier: E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 40676
IP address blocks: 206.168.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e3:be:5f:97:96:bb:5f:16:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29a724c-0ef8-416c-bb2c-359a0122375e
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=8cf75526-bf32-453d-ace8-9c9b74fdd480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4a:46:a7:9a:ae:28:53:09:71:5f:99:5c:d8:
82:15:22:b4:95:8f:03:4b:40:1f:1c:18:56:70:2e:
41:fe:13:da:86:74:62:27:f6:cb:22:91:39:90:42:
b4:10:8f:ed:6b:40:9b:8e:3e:64:d7:c6:6b:01:0b:
eb:b7:98:66:6a:a8:05:01:4e:b9:33:f0:c6:80:69:
a4:96:1d:0f:35:4d:73:e3:69:62:5c:f2:f5:03:16:
9e:2f:8f:61:04:ce:a6:c3:e4:41:24:e7:5c:d4:2e:
97:43:48:76:01:80:4c:63:82:11:40:aa:24:92:bc:
b1:64:b9:89:73:2f:ce:9c:21:80:0e:a5:a3:b2:7e:
d0:0a:dd:10:01:7e:ee:a9:db:b7:af:7d:f9:68:63:
a1:53:d6:d4:07:fe:fc:9b:74:b4:a4:9e:b6:d4:58:
54:57:46:66:fe:d9:8c:f1:6b:1d:01:64:06:8c:72:
53:21:ff:81:ca:ae:21:3b:01:7e:8d:07:58:ed:31:
53:ec:c8:25:32:fa:73:5e:45:eb:f4:ca:6b:da:dc:
4d:f1:ed:98:5b:8b:5e:f4:41:26:62:ec:df:3c:88:
2c:fb:e9:ae:c6:d1:75:bd:55:1a:29:46:23:08:74:
1b:7a:8c:91:be:82:f4:e6:83:42:5f:9d:59:03:89:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:14:88:A1:33:8A:28:70:7F:A5:90:C6:32:A5:C6:BE:72:C7:DA:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.crl
X509v3 Authority Key Identifier:
keyid:E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:4f:ef:09:06:f0:78:1e:2e:34:60:63:5c:d2:b9:94:d3:15:
63:98:d9:28:84:f1:d7:60:5a:2f:02:1f:cb:5d:17:a9:75:05:
dd:08:28:2f:e6:e2:0e:67:cf:f0:26:8f:61:da:0e:87:33:6e:
7d:ff:6e:38:37:c6:ce:19:fc:e4:a6:c7:57:0f:15:e5:e4:56:
a6:ce:67:92:e8:79:d0:af:7c:d3:68:66:13:27:e0:67:56:00:
00:44:80:e9:b7:89:17:1f:c1:cf:67:68:d9:33:17:bb:fd:76:
fc:e4:04:8c:96:39:80:fe:2e:d6:e1:fb:5b:ef:83:d6:cd:6c:
c6:1c:2c:74:de:98:81:1a:98:ed:b0:1c:0e:35:b9:3b:51:e1:
ad:60:59:c8:13:2f:53:55:90:e8:b6:2d:7e:58:5a:51:38:fc:
6e:1d:c7:05:00:0b:69:65:6b:e6:d1:34:7e:35:35:dc:c3:a8:
62:b9:d6:23:a1:b5:c7:59:39:35:af:dc:c7:40:9d:eb:94:f7:
f2:21:9d:bc:7e:18:45:11:ef:bc:37:9a:0e:4d:1e:64:c9:b1:
9e:a3:ad:ec:a2:46:47:bf:3e:bc:eb:5c:59:2c:b9:f7:cc:51:
42:0b:39:3d:64:6a:88:2e:f0:d6:e0:2c:dd:cd:47:24:40:db:
8a:63:6b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:17:25 2025 by rpki-client