Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa
File: dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa (raw, json)
Hash identifier: dzbTaBfxCFQco2+MLSHawNBYNNS++CYHxfKFAmsgdWM=
Subject key identifier: AF:AD:0C:C5:6C:C0:FA:6D:EF:FE:9C:0A:3D:21:2F:93:1D:FA:95:C1
Certificate issuer: /CN=208dcf74-3dce-4384-beaf-70319895fc4b
Certificate serial: 010D0C9F43285848159FF679AA9716C6AC728580
Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 16509
IP address blocks: 134.65.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f6:79:aa:97:16:c6:ac:72:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=127bd527-f7b0-4567-b5cb-e01086905d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:ed:89:6c:79:25:38:1f:30:d6:b2:d5:91:
42:44:41:fe:ea:f2:ec:17:01:1f:1e:19:65:c9:d6:
4f:39:a5:5a:dc:49:c9:a8:8c:72:39:57:a0:84:34:
44:5d:8b:a6:b2:b5:43:b4:fa:44:10:9c:4d:76:b2:
84:a8:92:20:5a:4b:b1:29:48:19:81:97:9e:e3:e4:
6d:5c:49:53:65:f0:dd:f2:22:7d:f0:29:91:f6:dd:
84:33:c2:b1:09:8e:50:f0:5b:1d:57:81:84:ae:06:
69:18:d4:de:ed:02:da:c7:0a:89:66:a3:96:a8:4b:
14:0c:8b:5b:0d:99:00:92:a1:03:71:c6:b2:49:6d:
43:51:26:43:ef:59:6c:56:fb:06:35:f1:50:fb:1c:
c9:6a:e2:21:e9:f1:68:bb:f2:64:1f:ad:48:f0:8f:
82:41:76:80:be:8a:28:0e:06:98:8e:01:ac:d8:0f:
98:52:45:5b:c3:02:b2:a1:cd:e5:01:c3:40:b7:d7:
27:d1:e2:b2:ad:84:aa:4d:f3:03:e0:72:a8:a3:70:
2c:da:c6:70:7e:f7:25:ae:3c:de:a5:b6:e8:c9:83:
aa:db:e5:b3:be:1f:df:4c:76:d1:7f:77:6f:8a:77:
0a:18:9b:a8:a0:59:20:53:3e:25:91:8b:3a:3e:35:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AD:0C:C5:6C:C0:FA:6D:EF:FE:9C:0A:3D:21:2F:93:1D:FA:95:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl
X509v3 Authority Key Identifier:
keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
sbgp-ipAddrBlock: critical
IPv4:
134.65.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:8a:7a:61:00:8d:31:33:bb:45:7c:7c:29:97:c8:82:b1:a0:
38:bd:d7:aa:3d:e7:1d:50:a0:0d:d7:6a:e5:47:7b:24:c9:1c:
03:62:f1:0b:9c:a2:94:32:56:a5:59:94:8d:bb:35:d1:5e:a7:
98:6c:e3:05:7a:9d:b2:40:43:f0:1b:ea:f3:2c:46:f6:24:2d:
db:64:f2:4c:31:9b:97:81:ff:f7:3b:52:3c:b6:0d:7d:5e:cf:
94:3c:d4:a2:13:b4:9d:4e:d6:1a:96:80:72:bb:f5:6e:3f:d0:
17:64:27:72:80:1a:97:9b:2e:ea:c4:a7:7f:3d:15:46:f9:01:
cb:f6:c8:af:55:3f:6d:a6:33:77:48:0f:90:29:93:93:8c:73:
49:22:98:47:25:54:74:65:41:7d:b8:08:6c:c6:bd:b6:b4:b6:
4a:25:7f:42:89:a2:b8:5d:1c:25:5c:0f:5d:6c:0b:c8:49:ac:
1b:2e:61:98:17:26:7a:f7:f9:97:28:42:0d:55:dc:b6:cd:14:
32:14:f0:6b:c6:c0:20:d2:32:b5:1a:e4:94:6a:21:fa:bb:26:
58:8a:78:b2:45:e8:c8:c3:78:3f:1b:89:03:28:48:e7:50:fc:
77:07:bd:78:6a:93:0d:41:5a:76:57:c9:88:73:6a:e1:f5:d2:
0c:83:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:41 2025 by rpki-client