Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/36ec94fe-ca47-3260-b205-fa7ba368981a.roa
File: 36ec94fe-ca47-3260-b205-fa7ba368981a.roa (raw, json)
Hash identifier: Z8raI6MKfmrByEWhripG6Tq15W9AYiTBapv4iPQq6Kw=
Subject key identifier: 22:DF:0A:1B:2E:97:CF:D6:4C:DD:C9:C6:F2:49:D2:CC:0F:0F:22:27
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F432858480BDA769C3C56CDC6864D87C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/36ec94fe-ca47-3260-b205-fa7ba368981a.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 7018
IP address blocks: 208.89.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:76:9c:3c:56:cd:c6:86:4d:87:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=9a382e60-21e4-4a8b-b97b-6416e54ea4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:a5:3e:1e:ea:f1:37:c5:84:19:c6:89:6a:
1e:2c:7c:f9:25:d4:82:91:33:a5:1f:3e:18:6d:83:
91:83:44:47:74:c3:7f:56:d5:d1:ff:0f:1a:c9:c0:
60:2c:16:65:dd:b3:70:f7:0c:c5:67:bf:86:71:e6:
13:e7:c6:c6:8e:cd:35:a6:4f:6d:86:69:41:c8:23:
27:54:a3:6a:de:c9:b3:fc:fb:fc:10:bd:da:5d:46:
52:2b:44:47:64:63:f3:f1:82:56:52:9d:66:54:e9:
4a:bc:89:a3:11:d5:fa:60:ac:d6:bc:80:66:90:03:
92:64:86:ca:fc:df:0c:55:29:3c:19:2b:75:2b:37:
4f:d6:e6:47:14:26:28:4a:63:88:80:5e:eb:54:40:
25:49:b2:7e:2e:b3:3c:81:f5:71:36:7b:58:0a:1b:
f9:db:66:ca:cd:34:18:c3:3e:e1:00:4a:0b:73:1a:
59:ef:9f:c7:ce:73:2c:34:d3:13:19:b3:8a:c6:12:
ef:40:5a:eb:86:f9:eb:52:28:db:e2:83:0b:2d:62:
e5:ba:4f:0a:6f:a8:c2:b2:43:00:aa:f8:b3:d3:e4:
70:f0:5c:e6:67:5c:af:1e:78:f0:8e:00:e3:b7:58:
a1:27:3a:08:1c:c1:20:52:b9:9f:a6:2b:3c:74:30:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:0A:1B:2E:97:CF:D6:4C:DD:C9:C6:F2:49:D2:CC:0F:0F:22:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/36ec94fe-ca47-3260-b205-fa7ba368981a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:88:e0:3f:e2:42:d1:59:15:99:30:53:37:4f:52:41:2c:96:
08:bb:20:0b:d1:d8:7d:89:13:a9:b5:79:97:76:d0:df:0a:b8:
cc:36:5a:8f:38:aa:3f:64:97:30:4e:e6:b4:86:10:08:cb:45:
85:f7:c1:f0:ab:ac:ad:08:c5:e7:72:e1:f4:ba:e3:86:c1:06:
44:b5:25:7e:82:65:9a:ff:f8:38:45:9d:d0:35:48:8d:26:78:
b0:64:a6:4d:4e:83:92:ac:34:1d:31:17:e0:cf:4c:1d:9d:b4:
ba:f1:e2:01:d9:5f:ca:a5:c4:af:3d:e9:ab:84:c1:ac:56:54:
a8:c1:a9:4b:05:98:0c:b4:e5:95:b3:5a:6a:23:7a:97:da:a9:
38:e5:76:14:0d:d3:8a:d6:fc:7e:cb:b8:3d:97:0e:4b:7b:8f:
8e:99:56:f3:2b:be:ec:4b:5c:ff:c1:87:81:69:7e:b2:7f:8e:
b2:56:48:9f:31:f0:37:41:0a:c0:0a:38:c7:ea:28:0a:5d:96:
7e:a3:70:fc:5d:0f:ce:12:06:42:5f:b9:9f:fc:a5:8b:e5:3c:
af:48:eb:0d:dd:3d:71:85:1a:ac:c4:4f:f6:25:f2:29:2b:0d:
c1:82:9e:63:4b:ba:0d:02:ea:f5:f9:f3:20:e5:d1:de:08:fa:
9f:d2:e0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:06:07 2025 by rpki-client