Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cbfcb4ed-9410-390b-a6e8-a363773c9803.roa
File: cbfcb4ed-9410-390b-a6e8-a363773c9803.roa (raw, json)
Hash identifier: rQhPDHeVH0EkrbOs+wl3HaYptyB2ttngMijizYEU9Zw=
Subject key identifier: AE:94:9A:A7:0D:1E:0B:B3:A8:8C:F1:C2:2E:55:27:3D:34:DD:1D:48
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F4328584867FAE53A848759D171EBADC0
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cbfcb4ed-9410-390b-a6e8-a363773c9803.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 393878
IP address blocks: 208.56.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:e5:3a:84:87:59:d1:71:eb:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=1d862e52-554e-422d-952d-f91a87129b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:f5:84:ed:8f:c5:2d:d7:58:69:3e:f1:05:
dd:c8:4f:d1:7a:3a:14:c0:84:e3:54:5d:40:b3:19:
3c:c7:fc:4d:84:1a:ff:8d:a2:b8:92:8c:86:52:fe:
63:6f:df:b8:bf:b9:fe:b9:5a:41:d0:03:93:fb:da:
e4:5a:42:d1:53:52:e8:cb:c3:32:ef:c1:50:07:f8:
3b:36:7e:44:2b:28:b4:e7:8f:bd:95:8e:ce:d2:3c:
c4:73:dd:b4:a0:c2:aa:7d:a2:13:99:d2:ca:43:e4:
f0:f7:54:dc:44:47:64:e1:31:79:2a:24:0a:03:c0:
93:a7:8c:2c:5d:45:e2:cf:e2:95:e1:aa:aa:8c:cc:
e4:c0:f7:47:a6:d5:1d:48:b6:70:9f:8f:e1:e5:dd:
26:c7:ed:5c:57:85:42:fa:20:28:c5:71:86:52:ff:
55:27:03:a7:07:29:e9:d3:b1:b2:f4:a6:6b:a1:c0:
e8:fe:80:1f:de:64:4c:45:34:4c:f2:86:c6:d1:e9:
1f:37:58:d5:9c:f3:58:7b:a8:73:7f:3c:23:74:83:
9c:75:60:ec:bb:9f:30:a5:f0:91:05:70:c6:0e:a7:
18:ce:31:9b:0a:21:32:b5:77:ba:e5:4c:f6:b9:74:
54:d1:cf:e3:0f:0f:2e:5b:99:ec:ca:62:e9:14:9c:
62:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:9A:A7:0D:1E:0B:B3:A8:8C:F1:C2:2E:55:27:3D:34:DD:1D:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cbfcb4ed-9410-390b-a6e8-a363773c9803.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.56.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:24:74:f2:ab:e8:1c:7e:43:52:b0:37:bf:91:4d:54:69:13:
1b:d4:4e:41:31:2f:05:9e:5e:29:f8:08:bc:d0:67:39:de:ad:
ab:6d:da:47:c2:7b:7c:f2:ea:01:fa:59:03:ac:4b:22:5f:49:
91:2c:03:a7:db:24:9e:47:f0:09:b7:91:4b:dc:b1:1d:2e:4f:
da:da:39:2b:6f:8d:1e:c0:e7:9f:77:80:fc:01:ba:17:b8:b5:
39:98:68:38:db:6a:11:31:be:eb:fc:95:0b:d3:14:5b:7b:54:
f5:a8:a1:52:78:06:7e:6c:d4:d8:7b:8d:1c:2c:f2:8e:8d:d6:
21:b0:c5:62:bd:35:1b:fc:7c:68:59:99:1c:43:ee:ee:f0:12:
5c:c1:a0:85:f1:e7:55:fd:c3:a5:53:6e:ec:a8:32:02:d0:32:
ec:de:c7:f2:d2:8b:99:99:cc:af:bb:06:5d:84:ca:84:29:d7:
58:46:44:23:3b:82:fb:c5:84:57:94:ba:db:8f:7e:bf:7d:18:
bd:70:7a:08:08:ee:72:68:3c:e4:86:70:ba:84:1a:7f:af:f2:
da:87:71:77:2f:39:12:02:2e:db:f0:87:1c:82:aa:ab:15:ea:
3e:25:ea:0e:3b:58:a2:f1:7c:9c:c9:d3:b2:e1:1c:ac:ed:f0:
5f:48:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:41 2025 by rpki-client