Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/2218f8f8-b5bd-3481-8397-51e1a1f24c54.roa
File: 2218f8f8-b5bd-3481-8397-51e1a1f24c54.roa (raw, json)
Hash identifier: ejUVKXVOWn0i+yLK4+Jo2B1e60QB923uTSwtkoMm8Js=
Subject key identifier: 82:C6:9D:8B:C0:C0:01:EC:1C:7B:EA:03:A2:AE:5E:B7:DB:27:06:4A
Certificate issuer: /CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
Certificate serial: 010D0C9F432858481351F84475D6EF80FE9BF140
Authority key identifier: B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/2218f8f8-b5bd-3481-8397-51e1a1f24c54.roa
Signing time: Mon 02 Dec 2024 18:12:24 +0000
ROA not before: Mon 02 Dec 2024 18:12:24 +0000
ROA not after: Sun 02 Mar 2025 18:12:24 +0000
asID: 395657
IP address blocks: 208.94.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:13:51:f8:44:75:d6:ef:80:fe:9b:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
Validity
Not Before: Dec 2 18:12:24 2024 GMT
Not After : Mar 2 18:12:24 2025 GMT
Subject: CN=154d04a3-6787-4b52-a851-de53422b8f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:92:c8:62:20:cc:08:e4:4b:57:54:f3:3f:28:
0d:7b:3d:ce:53:0e:a6:38:63:ef:21:3b:75:6d:14:
5f:2f:2d:0e:76:16:b3:62:1f:3e:e0:63:fe:2d:22:
27:82:d4:77:46:ff:f4:a9:e0:b3:62:73:3c:a9:6c:
5a:ec:40:bb:38:5d:bb:12:2a:59:42:6f:21:00:0f:
aa:98:4d:f8:15:c9:39:45:36:13:54:4f:9f:a0:ea:
35:82:cf:0c:bc:81:8e:2d:de:e3:7f:47:d1:61:4d:
7c:b1:ea:79:a5:3a:f9:0c:54:cb:46:21:0d:62:c5:
da:d9:0b:68:f7:fe:d8:dd:e0:d2:a7:4b:de:52:36:
73:a8:12:53:e5:49:9f:1a:94:80:b2:16:7f:6a:94:
85:e7:54:34:fd:7d:5c:3e:44:7e:1d:d6:b0:f0:13:
0d:29:df:db:f1:27:40:de:8b:58:7c:0f:fc:f7:b9:
03:62:d4:6a:31:37:97:16:24:d1:63:83:7f:01:09:
78:37:69:0e:69:38:d2:72:71:fb:b3:2f:6a:3c:bc:
37:94:86:3f:50:f5:44:2c:dc:dc:66:fc:d4:7b:ee:
38:30:4c:86:cd:5e:da:21:1c:cc:03:2c:f6:e5:55:
c3:d8:76:38:dc:4e:e3:6c:70:28:c0:de:2e:01:cd:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C6:9D:8B:C0:C0:01:EC:1C:7B:EA:03:A2:AE:5E:B7:DB:27:06:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/2218f8f8-b5bd-3481-8397-51e1a1f24c54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl
X509v3 Authority Key Identifier:
keyid:B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:1a:3c:23:2f:96:3e:3d:c5:16:24:5b:95:5e:4c:51:e8:dd:
77:87:6d:a2:82:42:a8:9b:b0:15:20:fe:03:4c:66:5d:3b:42:
a6:60:19:96:78:a4:f9:00:1d:8e:c8:b9:95:3c:82:c2:df:b5:
33:f6:f0:50:b1:05:51:28:49:03:5b:9a:90:e0:39:ba:be:09:
76:2f:e5:0a:71:8c:14:01:0c:64:60:da:10:0d:6c:c3:eb:d5:
6f:69:df:da:dd:9d:75:b7:3f:62:5b:a1:77:9f:06:5e:84:ac:
5f:ff:65:ec:4a:98:14:7c:78:69:c3:a2:03:de:44:0e:a3:b0:
ac:6f:15:92:d0:4e:fe:f0:82:bd:b9:19:9c:2a:b2:1e:65:24:
ac:df:dd:eb:43:bf:f3:79:df:25:28:e4:c0:08:09:0e:1d:88:
0e:a6:6b:26:4e:52:20:36:08:3f:89:83:38:23:e0:a3:29:4a:
c2:21:4b:c4:c6:f4:a7:67:4e:12:5e:2f:1f:97:cb:f9:6f:fa:
1a:f3:cf:6e:ed:07:a1:3d:ff:3b:64:1f:9e:97:c9:2f:83:dc:
80:a6:16:04:5e:f1:cc:6c:9e:49:62:46:3a:f8:75:e4:c4:76:
ca:11:51:40:13:6d:74:46:78:26:3c:c3:a4:4c:7e:e5:8c:f0:
b2:26:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:04:40 2025 by rpki-client