Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a6fd5fc4-a308-35f6-8bb4-e2b10b78f6f4.roa
File: a6fd5fc4-a308-35f6-8bb4-e2b10b78f6f4.roa (raw, json)
Hash identifier: d9w3TF//lrO0je+YNJJ6qSt/zEPFtMyhDXB6nZGzKaw=
Subject key identifier: 52:77:67:C8:9A:66:5C:9F:A4:1F:36:22:D5:A4:4F:18:66:86:23:10
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848467ABD55CF7B52258231D3A0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a6fd5fc4-a308-35f6-8bb4-e2b10b78f6f4.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 13576
IP address blocks: 208.53.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:bd:55:cf:7b:52:25:82:31:d3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=0eabdb21-5bab-4e62-a463-6642a38e01da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:e0:c8:9e:9e:e5:f2:b0:64:f3:e8:7e:a7:
c6:10:c8:ea:85:e7:ad:5e:8c:fd:94:e3:62:11:92:
70:c5:a9:31:2b:2f:88:9b:ad:7c:ae:d4:0b:32:ef:
71:d3:1e:1e:f0:cc:04:d6:84:c5:9e:29:cb:db:25:
76:65:87:7e:02:e6:b9:44:4c:ce:62:71:43:29:1f:
51:78:5b:75:3e:9a:52:40:ed:d9:b6:e0:00:19:60:
39:70:f5:da:7b:de:cc:32:59:57:8e:9f:dc:f0:14:
09:41:d1:da:e3:2d:ae:40:f2:e7:ae:d3:f4:96:2e:
9e:5d:76:83:12:15:e2:8b:c9:b9:9d:0e:5d:0a:97:
35:db:d1:9e:4b:9d:c7:b2:dc:c5:82:a2:7c:72:c2:
f5:e1:1e:fb:9c:2f:9a:4c:c8:d4:fd:d8:21:b9:2d:
9e:e2:f0:85:34:87:cc:fa:c2:b8:c0:37:83:08:50:
61:c7:5d:b7:a7:5e:e8:7e:cf:ad:82:72:0f:5b:7f:
66:66:5c:77:b6:7c:a2:c8:3c:c0:11:c7:9a:31:d6:
d3:d0:ca:a5:34:73:09:f7:f0:c1:ed:71:50:5f:a2:
b3:4a:a4:b7:be:fe:12:99:1d:0b:1d:23:af:e6:70:
d6:d5:82:f8:47:b8:21:55:e6:85:b9:2d:c9:b1:f8:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:77:67:C8:9A:66:5C:9F:A4:1F:36:22:D5:A4:4F:18:66:86:23:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a6fd5fc4-a308-35f6-8bb4-e2b10b78f6f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:30:5c:9b:9d:87:25:3f:fa:7b:2e:89:7c:e2:36:ff:01:c3:
58:c8:97:6a:87:a7:fa:fa:34:b6:9a:77:94:51:11:ee:90:48:
75:f8:3c:1a:9f:3f:71:e7:eb:a7:d4:eb:f1:5a:b8:4b:a3:be:
b9:dc:9a:34:0e:86:7e:b3:df:26:96:54:49:e6:48:5b:2f:b7:
e0:ba:50:5b:c6:a3:1f:ac:a6:a6:3e:4a:2d:35:ca:5a:fc:65:
ec:fe:30:d6:d2:f0:40:e0:73:1f:45:76:dd:12:a2:59:9d:dd:
37:98:a2:c7:be:a9:c8:75:3b:44:33:8a:6d:dc:4d:b2:d7:cb:
4f:2d:e1:46:08:05:e4:ae:c7:24:12:67:80:12:83:36:7c:58:
06:d5:1c:8a:51:4f:4b:47:17:60:cd:aa:4d:3f:2c:bb:3c:d1:
ff:35:8a:3e:aa:72:2a:22:1c:90:0a:48:e4:df:09:67:0f:99:
6d:0c:75:fd:78:f8:8a:29:63:76:5f:7f:d1:ba:bc:04:0c:88:
69:57:61:59:76:3d:ff:f3:40:22:32:9e:0b:97:b9:e8:2c:87:
0e:17:46:e1:3d:0d:3e:16:0c:46:e6:2d:5a:56:60:83:d6:aa:
31:6b:39:23:68:fe:7f:3f:c9:5d:8c:d2:16:12:7f:fc:d4:48:
3f:71:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:21 2025 by rpki-client