Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa
File: f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa (raw, json)
Hash identifier: 6ugyNo2a2K1mro2esjlMWmUWbBBTBOXDDD8AdWbp0O8=
Subject key identifier: 59:76:54:BA:1C:4F:09:AB:81:5A:F0:B7:5E:8E:3F:E8:C9:C5:E5:FF
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B346332F8FFE300120780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 208.68.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:34:63:32:f8:ff:e3:00:12:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=42be9674-c650-4b00-8af5-4b8ef51dd1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:26:6f:5d:85:74:d1:18:64:be:89:a9:4a:
0c:2d:5a:e6:0b:b7:3c:24:9f:75:fb:a2:bf:d5:d5:
0f:e6:db:68:ae:cb:f9:70:4f:fa:73:f3:31:ed:79:
43:83:a6:89:71:c2:6e:9c:1e:4e:fe:46:9b:3f:55:
8d:85:92:66:dc:37:94:19:20:7c:b5:8c:4e:6f:1e:
54:fe:65:10:3e:d7:b5:fe:03:3e:5c:f4:69:8e:37:
c8:de:e6:d1:54:1e:17:d7:28:de:bb:06:29:30:2e:
8a:7d:91:89:dc:48:88:06:24:2b:f2:88:d3:4f:22:
b9:38:b0:cc:fa:37:0c:3e:1e:5b:e1:7b:13:4a:93:
74:e7:30:f9:31:f6:75:5e:b9:a5:03:d0:4b:a1:88:
fd:fd:6b:01:d3:bd:92:6d:fe:ce:8f:ef:9c:41:90:
07:0c:53:47:c8:a9:a6:a0:46:9a:31:97:1e:d5:e8:
54:31:dc:db:a7:79:4e:3e:52:1e:c1:be:25:bb:6f:
2e:fc:3f:a3:89:50:c4:84:52:65:e7:3b:87:1d:c9:
a0:5a:bf:9b:1d:ca:15:d2:4a:cd:0a:d5:2b:89:ed:
27:2e:dd:27:6e:2b:b9:0a:2d:af:f9:4e:62:77:19:
2b:d6:2d:89:d9:3b:39:f8:14:d7:4d:c0:5c:28:5e:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:54:BA:1C:4F:09:AB:81:5A:F0:B7:5E:8E:3F:E8:C9:C5:E5:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:4c:68:f4:08:f8:8c:14:33:8d:37:f5:fd:63:9f:0b:cb:f5:
4a:66:72:ed:e9:d0:9f:b0:ed:df:78:ef:38:74:73:fa:3b:1a:
db:3f:bc:71:38:57:18:ca:ef:ea:fe:c2:b9:02:37:d0:b4:f2:
d0:5c:03:d5:eb:d3:1f:ff:b9:fc:ba:6d:79:b2:93:df:65:da:
4f:4c:21:8a:47:1f:c7:0b:be:a1:6a:d5:d5:12:13:09:6e:0c:
68:8c:b6:3b:cd:28:d6:2a:8e:09:c4:74:da:6f:c9:39:34:36:
a5:8e:c5:cc:74:73:3c:1b:e0:a1:ba:5a:31:19:5e:2c:66:07:
bf:ef:58:13:e8:07:08:ab:4a:47:1c:47:f8:a0:3a:50:24:b5:
de:c4:82:95:45:ea:62:5a:10:56:4b:63:8a:15:14:21:4a:73:
92:75:67:09:ac:9d:a3:4b:53:bd:46:14:df:3b:99:4a:ff:bb:
9a:c7:5b:71:d2:d0:20:07:d7:74:32:21:8d:65:fd:ec:81:3f:
77:58:37:9c:c0:09:37:55:6a:c0:a9:14:4f:d6:ee:de:88:5c:
91:bc:be:6e:35:44:6a:a5:ce:9e:1d:6f:62:1b:e6:d6:0f:c2:
70:fd:18:26:78:9e:2a:c1:6a:28:32:fb:90:27:99:c6:65:4d:
1f:ea:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:22:13 2025 by rpki-client