Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6c4e6a2d-93bd-3168-9ca4-58e2acaf2e54.roa
File: 6c4e6a2d-93bd-3168-9ca4-58e2acaf2e54.roa (raw, json)
Hash identifier: D1D2LWsmVp+Uhq4mNg1lt+7jPvEloxzxBPZjg/4On3s=
Subject key identifier: 1A:0F:AC:94:85:B3:9A:44:F0:A4:84:74:B8:7A:73:8E:FF:34:7D:BC
Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial: 010D0C9F4328584897708D7736C22E1355CB2AF4
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6c4e6a2d-93bd-3168-9ca4-58e2acaf2e54.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 43641
IP address blocks: 208.70.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:8d:77:36:c2:2e:13:55:cb:2a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=7df2425b-c36d-4bee-b680-47cfc5626c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:cd:32:b1:34:0c:fe:c9:89:fb:21:78:d8:
3b:e1:17:06:70:1c:19:bc:09:14:a6:6d:c9:9d:8c:
11:58:d9:00:1f:a1:e9:84:99:ac:10:9b:e4:b3:32:
97:37:18:7e:2c:22:f8:cd:11:9e:b7:35:2c:fe:d2:
52:d6:fd:15:a1:27:0a:d8:b7:0d:18:66:81:83:dc:
dc:9a:e1:f8:dc:20:18:22:0f:65:88:62:46:f3:06:
c9:14:e6:46:20:1c:fc:1d:ed:ef:e0:da:3b:48:b3:
9f:a7:99:1b:aa:e7:24:69:95:5e:fb:b5:c2:83:4d:
07:9e:29:6f:3b:63:80:bf:db:3f:76:05:57:bf:94:
e5:e4:bc:0e:32:d5:fe:c3:5e:90:9a:ed:90:99:1c:
f9:ca:0c:03:f8:46:3a:fa:c9:9e:e0:9b:f1:d7:c8:
a1:62:ac:3d:dc:11:b4:d8:b4:29:65:3b:0b:82:67:
2d:99:a9:34:18:9f:b7:7f:e9:c5:bc:0d:2d:97:61:
12:df:3c:0b:d0:87:54:e2:db:38:83:e3:0b:be:02:
8d:73:f7:de:1f:0d:13:fe:9f:0f:79:56:d5:e5:18:
49:f4:ef:74:21:fc:f9:4c:19:e5:22:3d:43:de:d2:
28:da:85:f3:b0:1e:1e:e9:1f:97:b0:d0:2b:ef:50:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:AC:94:85:B3:9A:44:F0:A4:84:74:B8:7A:73:8E:FF:34:7D:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/6c4e6a2d-93bd-3168-9ca4-58e2acaf2e54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
X509v3 Authority Key Identifier:
keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:1f:b9:8e:65:dc:77:37:04:f4:3f:d5:64:ef:16:9b:16:c5:
03:4c:cf:ff:4b:e4:57:29:05:50:b2:e6:da:e8:67:b2:89:68:
4d:ce:f5:43:d1:f7:5b:da:48:b0:5e:45:9f:08:7d:8c:cf:29:
84:99:e7:d6:bc:fc:10:18:76:bd:7e:9f:f0:7e:f9:12:57:11:
6b:84:6c:a1:5d:4e:4c:a8:a8:7a:ac:0d:43:99:58:81:b8:94:
72:c6:41:e2:7c:b4:d0:75:13:85:a0:f8:fb:1e:db:88:6e:bf:
ae:ce:4c:b8:12:5f:75:5a:3a:d7:4c:fb:d1:96:09:10:ac:17:
dc:e8:d7:a8:35:1f:29:18:5f:37:73:be:e0:9e:1a:21:35:90:
7c:be:ad:76:5c:49:19:f8:44:e7:2f:ff:e5:44:5d:1d:68:d8:
f3:35:ff:25:4c:f4:bf:b6:8d:27:a7:b2:12:a8:2d:35:95:51:
65:3c:f2:eb:82:06:95:2c:dd:80:11:bc:11:2e:5f:39:60:11:
25:c0:8d:cf:36:0b:9b:a8:f9:39:4d:b6:4d:59:a0:0e:fb:dc:
c2:99:8f:c5:d3:26:9a:82:76:0e:94:4c:9d:1b:ac:1d:39:e1:
1d:79:8b:31:7c:0d:64:62:aa:3b:0b:8d:33:a5:fa:ea:df:74:
25:44:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:50 2025 by rpki-client