Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c59e938b-a63a-4a83-986b-5e79642b6e10/19cb0eea-69e4-32e1-b9a4-5e823976908b.roa
File: 19cb0eea-69e4-32e1-b9a4-5e823976908b.roa (raw, json)
Hash identifier: ZiCZ2HEmo2/EDSgNW7v3cs5L75Av4vx2+e5Xt8M8+AE=
Subject key identifier: 41:11:06:01:84:A0:B1:53:34:E2:E0:4E:24:53:FA:B7:9A:A9:BF:B3
Certificate issuer: /CN=c59e938b-a63a-4a83-986b-5e79642b6e10
Certificate serial: 010D0C9F432858484945777D1E1C3A82F02B4B80
Authority key identifier: 01:50:31:34:55:D9:C1:F7:D7:55:91:D2:F1:8B:50:75:E4:34:44:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c59e938b-a63a-4a83-986b-5e79642b6e10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c59e938b-a63a-4a83-986b-5e79642b6e10/19cb0eea-69e4-32e1-b9a4-5e823976908b.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 3789
IP address blocks: 208.72.48.0/24 maxlen: 24
208.72.49.0/24 maxlen: 24
208.72.50.0/24 maxlen: 24
208.72.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:77:7d:1e:1c:3a:82:f0:2b:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59e938b-a63a-4a83-986b-5e79642b6e10
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=511bfdfb-65af-429f-9b85-0cf974154e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:54:a7:a4:36:fa:6d:c4:c1:96:2d:79:ea:
e5:b6:ae:28:1f:93:0f:ee:de:f7:44:f5:92:a3:ad:
f3:d0:28:8d:ef:ab:41:f1:53:c5:42:85:da:84:6d:
69:b0:e8:65:1b:65:74:b4:89:89:7f:45:86:a6:c0:
5a:39:59:89:7d:d5:ea:9b:62:f8:e3:7d:17:e6:35:
ee:b1:90:7b:17:c8:44:ec:21:44:88:cc:cc:d1:2b:
a3:af:51:e5:bd:c8:49:0f:26:82:a5:ea:90:33:16:
2b:d1:8f:43:fb:71:bd:07:df:31:53:0c:f6:21:7b:
c9:b6:ae:e0:58:41:9d:6c:18:77:71:25:c6:bd:e3:
06:f4:b8:cb:6a:a8:48:32:a6:c1:a9:bb:ba:40:45:
b0:66:97:c0:64:ba:6a:89:de:c8:bc:9f:45:43:a4:
25:cf:d9:28:eb:d2:34:fd:66:bb:78:b0:f1:12:ec:
9e:3b:80:30:15:cc:24:b1:5c:af:b7:4a:07:ab:5b:
62:01:92:0c:2a:e0:e2:ec:d5:56:7d:b0:d2:d0:c8:
99:4e:fe:43:54:e0:d8:94:5c:10:20:84:a7:1e:5c:
29:8e:ce:22:f6:2d:b7:7f:9f:80:ec:c8:b8:13:e2:
9b:67:eb:89:82:a2:57:38:a9:77:41:24:4e:79:dd:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:11:06:01:84:A0:B1:53:34:E2:E0:4E:24:53:FA:B7:9A:A9:BF:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c59e938b-a63a-4a83-986b-5e79642b6e10/19cb0eea-69e4-32e1-b9a4-5e823976908b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c59e938b-a63a-4a83-986b-5e79642b6e10/c59e938b-a63a-4a83-986b-5e79642b6e10.crl
X509v3 Authority Key Identifier:
keyid:01:50:31:34:55:D9:C1:F7:D7:55:91:D2:F1:8B:50:75:E4:34:44:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c59e938b-a63a-4a83-986b-5e79642b6e10.cer
sbgp-ipAddrBlock: critical
IPv4:
208.72.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:ae:e4:98:a0:84:c8:a1:4e:36:b9:f9:37:fa:f9:07:49:7d:
ee:24:22:82:3b:e5:e3:ca:1c:bf:e2:c8:e1:d5:8b:5b:cd:19:
3a:ab:b9:7d:f8:16:ed:ae:09:fd:3d:4e:9c:27:12:c1:a5:56:
10:1a:92:03:5e:b4:10:3e:54:94:bc:f5:e2:57:91:fa:5e:64:
37:ef:e3:27:53:89:00:5e:2c:cc:c1:ac:02:77:44:8e:8d:65:
4b:03:5b:bc:37:62:21:96:a7:19:72:cd:53:db:6e:be:b2:3e:
70:a0:eb:66:15:52:66:f2:8a:2e:55:9e:30:08:4f:48:80:c9:
04:6e:c4:06:0d:a8:08:01:91:3e:bc:d0:c4:9c:3f:f1:f2:11:
28:60:cf:40:8d:ba:c0:36:70:99:cd:8f:28:7d:e8:4a:af:0c:
68:20:f4:91:28:b1:b2:83:f2:02:e7:f1:70:72:e4:45:da:33:
66:f1:47:a9:34:ea:dc:e7:66:d9:26:35:32:3e:68:6a:6c:b9:
a6:e6:fc:c7:10:fa:62:ab:22:f0:38:70:4e:fa:9a:14:f4:24:
4a:14:fa:06:0c:53:20:c5:f5:89:f9:4d:7f:e2:16:e4:94:e3:
49:58:8e:26:ec:5a:8f:39:03:b2:db:45:07:49:e2:8d:9e:9f:
dc:be:48:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:54 2025 by rpki-client