Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa
File: 02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa (raw, json)
Hash identifier: p82XU+oXYOXAEDczL+AzFd9rdBNZtsBd/REwgrw2tV8=
Subject key identifier: E0:DD:94:6C:E3:FC:A6:03:AD:3E:9E:58:A3:16:2F:3C:FB:17:0A:DB
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848116FBC211360E0B3549CE180
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 2734
IP address blocks: 208.84.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:bc:21:13:60:e0:b3:54:9c:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=b0731b72-c58c-4b70-b62c-8711cbada2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:6f:7c:34:f3:6b:f2:d6:3c:c2:fa:50:fa:
98:18:a7:a5:9c:c6:d6:99:76:c5:9a:d6:06:9f:7f:
27:67:6d:d1:00:77:e8:cc:3e:de:3d:ef:1d:fa:81:
73:4d:3e:db:1e:39:ae:00:4f:3f:c7:e4:dd:37:db:
ff:ab:33:ed:07:eb:4f:7a:2a:1f:c3:9e:22:16:4c:
85:a8:72:29:c1:11:88:1e:0f:17:be:d8:5c:f2:64:
f7:7b:22:8c:26:c4:31:bb:d7:77:34:5f:8b:46:b9:
c2:9e:04:50:2d:c2:e9:f7:5c:4d:ca:56:36:a0:c2:
ba:44:c0:95:91:06:d1:3d:51:b9:8a:15:1e:a5:b3:
2a:29:de:b9:e7:36:4c:bd:73:93:99:8f:54:1e:99:
93:8a:16:d5:ef:20:d8:a6:61:b3:57:fe:78:4b:2f:
24:b7:66:5e:71:18:0f:59:19:10:e4:32:7f:e1:9d:
a4:ce:52:ab:4a:6f:e5:39:fd:5f:3d:81:4d:21:c3:
32:7b:eb:60:53:a2:f5:e9:78:55:dc:89:ec:c4:d2:
24:33:d1:c1:26:c0:c2:a9:60:5d:26:5a:e2:80:4d:
fb:12:3f:48:ee:f2:20:0d:63:33:56:96:2c:c7:10:
1a:fb:c3:b3:76:79:55:5f:ab:37:66:3a:8f:71:be:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DD:94:6C:E3:FC:A6:03:AD:3E:9E:58:A3:16:2F:3C:FB:17:0A:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/02e6ecfe-4d10-34f2-ac4e-06d62206b050.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
208.84.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:77:e8:45:6d:4d:e8:e6:72:6a:95:e1:17:53:d1:a5:88:86:
5c:50:99:6a:ef:fc:59:ac:4e:91:a3:55:dc:cb:89:70:de:37:
6d:2f:64:cc:0c:d2:44:51:66:cd:e8:f3:e8:ef:0f:d0:e0:56:
ce:4d:42:71:b3:ba:0a:91:d7:0b:8f:24:2c:6a:10:96:0d:da:
8e:f7:77:0b:f9:b9:65:e1:d7:6c:02:57:57:ca:47:b3:d0:e6:
65:5d:8e:b7:a0:fd:5a:80:51:a8:db:75:dc:d4:36:fa:0a:24:
7a:88:85:e0:b7:bd:70:db:3d:9f:9a:36:7d:19:a4:17:d4:85:
e1:a7:8e:2f:0c:46:f7:1a:e4:b1:98:7b:d2:ea:64:01:ab:35:
46:5b:cc:7c:35:69:54:98:48:36:25:e5:08:2e:d3:f1:d7:17:
13:62:d1:4a:da:d4:35:f0:4c:09:17:65:e3:11:84:4f:7e:56:
1e:a8:a4:50:65:ba:fc:20:62:1f:ab:b8:d0:6d:7f:ea:90:61:
64:1b:9d:a3:9c:1b:9f:b2:6a:43:f3:4a:1c:c1:cf:75:09:cd:
81:42:0d:1e:b1:a5:49:5b:6e:dd:66:8d:3c:be:bc:bb:6b:da:
1a:2b:a5:8d:05:40:de:29:b0:93:23:0d:54:46:b0:6e:96:95:
68:72:69:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:48 2025 by rpki-client