Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa
File: 0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa (raw, json)
Hash identifier: SU7D7Pa3jzARMaebmMgQ2OKHCwZymSRo/F+3sNtMIyA=
Subject key identifier: 6F:5B:F5:D2:80:EF:C1:D2:F5:D7:F5:92:AE:57:F3:79:D2:97:B5:72
Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Certificate serial: 010D0C9F43285848100A947B2B3AA66E31EEF1A8
Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 174
IP address blocks: 208.94.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:94:7b:2b:3a:a6:6e:31:ee:f1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=1ede39e1-b7dd-4fd9-b4b7-c7019c83cfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:5d:5a:a0:ac:91:a4:28:46:ca:91:86:55:
34:2b:8b:ca:01:0b:91:b8:08:5f:bd:f2:15:c8:bf:
31:82:c0:1a:9d:54:4c:5d:8a:e8:cb:ea:9f:10:79:
d1:72:25:9c:07:81:44:52:0b:50:da:64:c8:b9:79:
e2:1e:6b:8b:ec:f7:97:e4:4d:63:2d:2d:6e:31:c7:
e2:b8:fb:72:fa:3b:f1:9f:88:71:e1:d7:f5:50:69:
3c:ed:c5:7e:23:92:0e:e9:c5:bc:d6:af:22:bf:13:
a5:d3:26:78:88:a3:2e:eb:ba:34:b1:5e:11:25:7b:
e4:3b:55:86:26:6e:c2:77:5f:48:82:38:07:45:bf:
a3:5d:06:ae:e7:72:a5:21:02:2a:b7:56:19:d3:70:
93:50:db:51:48:ce:7a:99:2a:03:e7:88:19:19:ec:
b5:33:cd:e8:d2:88:7e:94:1e:c6:c1:98:69:4f:7b:
75:42:cf:c9:19:18:fa:61:28:a5:8a:2b:43:c4:11:
09:a1:0a:7f:1a:6e:5b:8b:86:3c:28:94:b6:58:b1:
83:61:25:a6:af:d2:be:68:46:07:11:39:8c:8e:33:
52:00:42:62:81:0e:50:4c:9e:e3:76:75:d4:ce:17:
94:3f:ed:8f:b2:36:d0:25:10:42:f8:c4:b2:3c:8c:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5B:F5:D2:80:EF:C1:D2:F5:D7:F5:92:AE:57:F3:79:D2:97:B5:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl
X509v3 Authority Key Identifier:
keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:f6:a7:ae:1f:6a:28:c2:4d:ee:09:19:ca:ee:4b:87:66:c3:
83:d1:7f:e1:79:44:b1:46:dd:de:4a:98:bc:90:8a:98:16:e6:
e2:0f:07:92:f5:bf:4b:ef:87:23:48:8e:52:e2:76:37:e7:e1:
74:6f:b0:2c:55:3a:d2:7d:f0:3e:14:7d:82:f8:78:a2:c8:4f:
df:2a:7e:46:7e:6c:63:2f:96:dd:99:b2:83:f2:60:ad:4d:2a:
1b:dc:0c:b6:6e:b4:dd:bf:cb:ec:ad:95:4c:75:a8:e2:ca:ab:
7d:9e:af:e5:f9:23:87:36:26:ab:9b:38:a1:66:6c:74:ac:97:
c3:cc:34:b3:9d:45:9b:f6:94:62:74:14:a1:a3:c0:19:be:0b:
8a:f2:42:27:f9:46:b3:bb:cc:bb:49:5c:f8:c6:3c:c9:aa:7b:
99:fd:9e:9f:54:b6:ea:c9:46:db:05:cf:62:db:d1:3c:86:d0:
06:ed:e7:61:7a:8a:8d:c6:26:ff:78:dc:62:2e:6b:21:49:d0:
08:24:0c:7c:27:17:e9:93:89:f0:b7:b4:90:24:7f:17:b4:48:
75:fa:0c:18:49:23:31:9a:a6:ba:1f:93:71:3f:85:81:c1:b5:
6e:9a:41:08:e6:fd:a3:14:9c:e9:3a:54:1a:7d:d2:75:73:83:
b0:07:4a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:50:09 2025 by rpki-client