Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/c152772a-1f9b-3f1b-9084-66c9415bc849.roa
File: c152772a-1f9b-3f1b-9084-66c9415bc849.roa (raw, json)
Hash identifier: Zxu12OO/3qab31PvWZD6dOzlcGSxM0wtUB7Tntayf1Q=
Subject key identifier: C8:8D:41:E1:C7:1E:79:72:B8:E9:13:E1:4D:19:E1:6E:10:EC:C6:19
Certificate issuer: /CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
Certificate serial: 010D0C9F432858487755D6BEBA317BDA1ABC22C0
Authority key identifier: 9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/c152772a-1f9b-3f1b-9084-66c9415bc849.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 46253
IP address blocks: 208.94.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d6:be:ba:31:7b:da:1a:bc:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=c41277f9-5cd9-42a9-8897-c126afa8f343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:b9:b8:93:44:21:cd:68:0a:e1:b5:3a:08:
6d:a2:9b:e2:c6:57:fd:c1:a1:7e:eb:47:a2:0e:0f:
80:43:f7:40:95:fd:a1:73:5e:bc:f9:5a:a2:62:33:
a9:89:51:50:67:9b:38:45:28:83:76:f7:90:1a:ee:
6e:7d:b1:6f:98:19:60:af:b3:0a:6e:5a:b7:89:97:
8d:b1:29:cd:1b:db:f8:ad:c7:ad:d0:34:1c:3f:19:
de:99:a3:c8:56:02:2c:f7:12:c4:d0:f8:22:7d:df:
5e:ca:f1:f1:ba:0c:cf:7b:07:2c:e3:5e:9d:d0:f5:
ad:0f:5d:2a:fb:c9:aa:60:93:19:31:0c:42:08:46:
cc:98:68:36:c1:80:06:77:78:26:d3:be:14:d1:ad:
df:dc:9a:c2:f7:94:2f:93:de:2e:eb:30:08:f1:60:
7a:b8:ea:17:52:f8:3d:9a:5d:82:41:08:b7:19:37:
d6:7f:1f:e1:76:4a:e7:05:54:ff:b2:94:7f:37:f1:
8c:ed:13:b2:60:6b:e7:f7:08:bc:8d:78:f7:ea:78:
a1:f0:66:68:22:00:90:94:09:be:49:d6:5b:e1:d4:
6c:f4:3a:76:3c:c5:97:38:cc:5e:0f:ac:26:e3:34:
49:90:88:cf:e1:ab:bb:ef:50:54:62:0a:47:fc:64:
49:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8D:41:E1:C7:1E:79:72:B8:E9:13:E1:4D:19:E1:6E:10:EC:C6:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/c152772a-1f9b-3f1b-9084-66c9415bc849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.crl
X509v3 Authority Key Identifier:
keyid:9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:13:7e:99:27:33:f5:f1:48:d8:90:ab:d5:1c:8b:8e:34:e1:
f1:88:2d:19:fe:7d:17:87:9c:e1:fe:41:b5:71:fb:6f:31:1f:
74:95:31:ea:62:3b:42:c9:45:a4:af:29:bd:33:71:a9:57:64:
c1:8b:8a:11:b3:19:19:e3:90:79:45:1f:e0:4d:7f:d0:02:af:
cf:7b:e0:a1:0e:9f:c3:8f:c7:a9:df:cb:59:f5:7f:fa:1e:df:
fd:96:b7:37:d7:2d:b9:6d:ba:19:ed:78:64:f1:aa:22:c0:77:
58:e7:63:33:b1:10:47:1b:03:03:16:f9:33:b9:c9:f8:a2:99:
d3:f3:11:a2:e6:a5:e6:d6:ee:61:05:04:9e:1e:6d:7e:b1:d0:
cf:3d:2c:cf:33:58:46:00:50:9f:7c:6d:e1:33:60:c7:a4:b3:
ef:99:4c:98:a7:fb:a0:b5:3b:08:3d:40:fe:a6:96:dc:f0:ec:
06:35:e7:c9:f1:6e:95:e3:be:52:94:7a:85:bc:48:5b:07:bc:
1c:2d:6f:30:77:82:34:6d:57:19:d9:8e:dd:27:5e:aa:39:09:
5c:1d:82:4f:24:de:94:9e:cc:93:82:67:ef:4e:7f:a6:c3:dd:
88:50:9c:7a:85:e8:2a:fd:89:ff:25:11:0f:23:41:0b:7d:39:
af:ea:11:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:10:37 2025 by rpki-client