Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/5d92ed6a-ed8e-302c-87eb-be00eeb682fb.roa
File: 5d92ed6a-ed8e-302c-87eb-be00eeb682fb.roa (raw, json)
Hash identifier: 6fPa2KFBpyQq8uVKuUrDVkWpdewUmgR9/gYXDlYu87g=
Subject key identifier: FE:44:82:9C:B0:A4:07:55:0D:E8:CA:1B:95:0E:D5:3C:79:16:B5:E9
Certificate issuer: /CN=2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c
Certificate serial: 010D0C9F4328584819CFDFF1412FA3FB82B59780
Authority key identifier: 12:A1:34:FC:C2:53:BC:E3:D6:BE:BF:F1:AB:D0:44:4C:8D:1B:07:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/5d92ed6a-ed8e-302c-87eb-be00eeb682fb.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 46244
IP address blocks: 208.93.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:df:f1:41:2f:a3:fb:82:b5:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=a1baa887-5235-44b2-8142-920f44aa06fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0c:56:1a:db:0a:5c:83:e1:31:03:37:6a:53:
44:94:ec:be:41:e9:33:ab:78:35:6e:c8:20:ff:93:
cb:dd:32:d3:25:05:94:f1:48:a6:a5:ad:5b:46:fe:
e8:44:57:01:8b:93:e7:e4:1a:89:d6:5c:93:7f:f6:
e4:77:f7:ea:70:e8:85:37:33:cf:ee:dd:28:28:21:
b7:c9:0f:a9:4c:a3:ef:a5:f4:70:7a:c9:cb:77:4a:
e5:54:b2:f9:e9:e7:c4:bf:cf:08:d1:ca:2d:61:93:
2f:d6:2a:1e:ff:ff:6e:9e:3a:8a:5f:f8:3c:f0:c2:
03:a1:85:15:af:9e:cb:ac:7b:08:95:fd:b9:8d:ab:
11:5f:b8:3d:a6:01:2e:52:b6:4c:fe:b0:0a:0c:d3:
d5:39:1b:36:3a:f1:43:e4:e6:ab:57:9e:64:bd:b3:
41:6e:83:5b:ca:1d:bb:28:5d:af:ce:d9:cd:33:4e:
58:c7:96:fc:35:31:85:b8:2a:a5:fc:df:93:f5:ec:
68:6a:a5:f7:35:0a:03:ad:4f:43:92:bf:b3:8b:93:
66:83:1e:b7:b2:f4:87:4b:bf:55:51:d0:b1:3e:ef:
cb:8f:b6:de:5c:21:54:82:90:cf:b2:db:05:4e:df:
af:6e:7f:13:ee:fc:54:a7:8e:98:72:32:1a:88:a0:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:44:82:9C:B0:A4:07:55:0D:E8:CA:1B:95:0E:D5:3C:79:16:B5:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/5d92ed6a-ed8e-302c-87eb-be00eeb682fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.crl
X509v3 Authority Key Identifier:
keyid:12:A1:34:FC:C2:53:BC:E3:D6:BE:BF:F1:AB:D0:44:4C:8D:1B:07:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.93.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:97:dc:3b:9f:3b:94:89:84:c1:f4:99:3f:1c:7f:97:55:7c:
09:c0:37:c4:09:fe:84:19:a1:4e:e4:d5:8e:d4:da:eb:0d:fd:
2c:b3:bb:cc:b6:01:73:48:d5:b0:41:96:48:98:34:d3:59:43:
a1:96:79:d3:54:fa:f3:3a:46:4b:7a:c5:e2:32:aa:fa:1c:bd:
24:c8:2a:dd:63:a6:ac:37:ce:04:2f:77:b4:4d:4d:a2:cf:a3:
f1:2a:94:c3:c5:32:f0:68:1c:66:4c:9e:2a:27:eb:7f:c5:04:
b4:3d:1a:1e:23:85:d9:b6:5b:58:a7:88:60:43:d1:ce:b7:50:
b0:8f:dc:93:49:1e:44:8e:97:de:5a:ef:f5:4f:21:49:d0:38:
ac:dd:e3:cb:1f:8a:71:3f:e9:fe:4e:1f:93:c8:d9:71:ff:21:
f6:94:bf:f1:95:7e:fa:36:81:e7:04:1b:07:87:02:e5:17:e4:
cf:00:dc:88:08:c4:5d:da:75:bc:f4:f5:54:e4:06:9b:a9:6c:
59:c2:ba:49:c5:de:91:86:a3:29:a9:35:dc:4d:95:29:06:92:
3d:36:2a:35:65:74:79:bf:bb:3f:5d:4a:22:9c:da:a7:0b:31:
36:04:70:f2:a1:a9:32:97:c7:9b:61:f0:cf:45:ca:65:de:11:
f5:3c:a1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:18:27 2025 by rpki-client