Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/00ea4238-793c-3ca7-9a51-330cb7f4b941.roa
File: 00ea4238-793c-3ca7-9a51-330cb7f4b941.roa (raw, json)
Hash identifier: 1HHhPEkILa0NiQiW7g52UQXQOxH1l6x9m8pvPiPqLRc=
Subject key identifier: B2:21:EF:9C:4B:0E:2A:9E:59:4C:9A:8C:B2:FD:C0:77:F0:DE:34:7E
Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial: 010D0C9F4328584858A058296B9FDD523D3F30E0
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/00ea4238-793c-3ca7-9a51-330cb7f4b941.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 6079
IP address blocks: 208.72.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:58:29:6b:9f:dd:52:3d:3f:30:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=ca972f4e-c5b8-417c-a1b0-f10d0d75b6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:e7:00:44:df:a6:5c:7c:c2:4b:a6:fb:9b:
e4:4b:94:fb:5e:50:ea:41:e0:1f:f9:84:27:4e:d4:
15:12:99:1c:ab:52:36:50:6e:d5:d8:0b:26:bd:2e:
94:8f:f5:85:18:68:45:37:28:a6:aa:66:d4:82:0f:
5b:b9:4f:e2:14:88:df:05:c1:14:75:5f:bd:31:3a:
23:d7:b5:03:6a:68:74:36:18:ea:ba:eb:fd:af:91:
5e:9c:bd:d2:32:e6:19:9b:33:3a:45:10:65:40:08:
9a:7e:31:c9:9f:ea:a4:70:dc:74:f3:e2:d5:ed:5e:
aa:f2:98:07:91:94:db:71:79:ea:5c:45:8e:03:83:
c7:de:75:3d:41:64:1d:83:28:95:91:7a:63:77:33:
81:5a:7f:e7:d4:f9:56:1f:14:59:41:fd:46:74:26:
23:19:84:fe:76:bd:5a:87:28:7a:73:2c:33:a1:c9:
37:a0:cc:c6:1e:e8:49:11:0b:a0:cb:de:3a:50:de:
04:a4:3b:b5:05:c9:c3:d8:16:8d:3c:c7:a5:a4:45:
d9:79:c3:b7:f4:99:c4:ed:81:85:3a:f9:26:8d:3f:
6c:a8:98:2b:6a:72:59:68:13:82:f5:47:95:5b:e8:
ac:7f:cc:df:4c:95:47:4c:b3:04:6f:84:fa:b5:b3:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:EF:9C:4B:0E:2A:9E:59:4C:9A:8C:B2:FD:C0:77:F0:DE:34:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/00ea4238-793c-3ca7-9a51-330cb7f4b941.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
X509v3 Authority Key Identifier:
keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
sbgp-ipAddrBlock: critical
IPv4:
208.72.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:80:bd:e3:e7:50:f9:71:f7:dd:25:a0:3b:8c:13:b2:93:7c:
7d:6e:1f:46:a3:df:34:f9:0f:32:5a:5e:1e:e4:43:a8:a9:4a:
1f:99:0d:b5:b2:e3:7a:43:cd:d3:d5:f0:64:7e:03:4a:6d:1a:
c8:fb:41:81:ca:f9:13:f6:da:5f:9f:06:5c:b0:cb:ee:49:4f:
3d:7f:00:c8:e8:07:4c:ca:7f:f3:a9:36:2f:f4:bb:a3:58:42:
f4:79:3a:ab:47:8d:ce:af:ae:d2:77:e3:c1:b0:49:1d:78:78:
17:bc:99:71:56:d3:24:5e:34:0a:27:57:ac:9e:c0:b7:4b:de:
f5:38:ba:2d:a2:26:02:eb:09:43:31:20:a0:79:0a:c2:3f:8e:
2b:48:e9:9e:02:41:38:85:9b:b5:ea:40:e4:b7:a3:bc:73:c6:
f3:67:c6:f6:0e:e0:0f:09:b7:4d:3e:0c:93:1d:42:cd:92:3b:
72:6e:0e:60:b7:f4:99:4c:99:fd:df:69:6e:5e:55:10:d3:b5:
ab:ba:e5:2e:bc:e5:bd:83:89:77:51:6c:49:55:a4:64:a7:08:
89:71:a2:ec:2b:5b:29:a8:fa:a3:b4:f5:00:5b:2a:0e:57:54:
cc:48:71:61:3f:27:e3:69:c9:fc:e9:2f:b9:b0:2d:3e:76:29:
ac:fa:9f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:19:04 2025 by rpki-client