Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa
File: af9473bf-b67e-357e-95a9-91892269d8f7.roa (raw, json)
Hash identifier: 4xEh4IQ9pgmwYPsToC805JNytMNF9kbsrvybngrWCPk=
Subject key identifier: D2:41:B6:37:9B:36:4F:5C:A9:D7:52:84:B6:EE:AE:E6:54:1F:F9:D5
Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
Certificate serial: 010D0C9F43285848037B65EF4A41DCEBB8D94C00
Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 14618
IP address blocks: 208.79.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:65:ef:4a:41:dc:eb:b8:d9:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=53ea4dfd-37f2-4d93-a15c-1292e6af574c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:27:03:63:b8:33:b3:35:a8:7c:71:66:79:
b5:ed:9d:0b:66:a2:fd:00:0a:99:ab:8a:97:b0:41:
46:7a:fa:3a:35:8c:6b:0f:d4:df:b5:8c:94:b2:41:
1e:4e:20:42:15:c9:2d:32:8b:9f:94:8e:2c:94:fb:
2f:f7:de:f4:43:f9:28:7c:45:95:4e:94:5d:9a:7b:
c0:96:8e:0f:5d:f4:18:2c:24:a2:42:71:eb:dd:1a:
2a:2c:9e:f4:85:6c:88:9f:75:8a:2c:16:ae:a9:98:
28:3d:c5:4b:05:b4:52:88:8c:2c:92:a4:99:b3:47:
44:ff:90:e5:08:a9:c9:fb:6c:82:e6:00:b1:08:df:
ab:7d:c9:f9:e3:10:e7:8c:d9:a1:e0:aa:10:0b:b6:
80:e3:ab:60:2f:54:07:b0:01:ab:f5:33:03:ec:a3:
66:bb:c5:7a:7b:c5:bc:92:2a:95:0c:61:57:1f:2a:
1d:4b:22:c7:02:26:2f:e5:4c:54:9d:4f:7e:d1:7e:
d5:b6:3c:64:ba:7c:f5:87:f1:c3:35:d6:04:a4:31:
34:54:1b:91:46:19:a7:ef:02:e2:e6:a7:63:9a:04:
fa:be:4a:83:09:65:5c:41:b4:4a:a0:e7:00:da:aa:
1b:cf:17:3d:ee:d1:66:c2:81:63:68:88:4d:71:70:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:41:B6:37:9B:36:4F:5C:A9:D7:52:84:B6:EE:AE:E6:54:1F:F9:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl
X509v3 Authority Key Identifier:
keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.79.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:97:a0:a6:8d:e4:ff:42:a6:f7:79:e0:33:d8:37:e0:dd:b0:
bf:9c:9b:6d:bb:d4:a3:ed:69:b0:76:4a:41:73:5c:12:b6:dd:
c3:f0:9d:3d:f0:cd:ca:1a:ae:8a:0a:ca:40:5e:9d:29:5e:e2:
3e:ca:b3:d1:ef:32:04:3b:62:66:06:45:d9:9d:de:60:20:68:
e7:0c:10:47:f6:8b:5f:cc:39:73:8b:fd:db:41:f4:21:e1:e0:
29:67:5f:b4:1d:33:6f:4a:1e:f7:be:3f:de:d9:36:79:15:6c:
2b:7b:2c:8e:80:66:d0:81:1c:e2:ca:e9:8d:32:dc:3e:57:15:
82:f2:a8:b0:81:0e:73:a1:b2:be:bf:6f:cc:ad:c9:34:53:1d:
3c:56:6f:96:81:b8:38:b5:03:b6:b4:db:39:d0:06:71:84:cb:
0d:cb:40:f0:e0:2e:3d:23:74:5a:7b:87:fd:13:41:8e:ee:04:
19:70:43:82:70:d5:e4:8b:bb:a5:fe:c6:da:93:51:21:a1:99:
28:80:c9:a4:03:6d:f4:80:21:c6:85:ae:32:49:89:82:9a:cf:
e3:c8:d3:36:c0:85:15:56:f1:19:6a:20:08:b5:ab:b7:f8:0e:
86:ac:a2:08:44:02:74:42:e0:9c:3c:1a:c0:3d:f4:4d:5a:8d:
89:ca:28:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:34 2025 by rpki-client