Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa
File: 1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa (raw, json)
Hash identifier: 9Zb+aZvkX6fc1jCWbQAR3tCHOULWGPK0ddeubr7vHUk=
Subject key identifier: 9C:BE:FE:4B:9C:C0:99:96:74:8E:22:FB:6C:C1:34:21:BA:32:9F:DA
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB419AF8F3AF74B4056740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 0
IP address blocks: 208.217.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:41:9a:f8:f3:af:74:b4:05:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=76af82b2-8f59-4f35-9e69-836479d42335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:71:e3:a9:2a:90:05:1e:3b:45:b6:18:f9:cd:
de:ef:13:43:a6:4a:fc:b0:71:51:aa:0a:ed:37:f2:
0c:79:64:3e:dc:a5:b4:6c:b2:3f:9f:99:87:c7:28:
3d:bf:84:78:5a:7d:d2:16:2f:79:50:21:09:d6:2a:
a4:79:55:24:7f:bf:2a:68:a3:4a:94:28:b5:dd:d7:
a1:28:76:6e:03:d4:03:06:84:31:b8:1c:b9:6b:4f:
6e:9d:0a:9e:8e:14:f0:a4:96:6d:06:5b:22:3d:b2:
a1:b8:a3:c8:b9:d3:a8:7d:47:be:0b:68:1d:d7:7e:
41:62:92:7c:e6:e2:ba:cc:41:1e:5a:00:ac:d2:7b:
ba:bc:fc:d8:4e:8d:79:56:fe:80:5d:da:48:8a:83:
84:b9:fb:82:c9:21:70:70:6b:58:03:5d:57:35:40:
93:d5:75:90:27:a5:74:46:24:70:cc:c0:25:d0:34:
d4:34:33:7d:1a:38:4b:04:e5:09:0c:6a:a3:b1:7b:
a4:28:ad:57:83:1a:6d:de:1d:0d:9c:36:59:00:91:
36:45:5b:82:f6:e5:e6:30:ed:ef:2b:14:f3:dc:26:
9d:da:f5:52:ce:30:28:fc:1a:61:42:6b:36:e2:78:
d1:31:cb:f2:98:c7:4c:e3:b2:e4:a4:1e:ba:74:35:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BE:FE:4B:9C:C0:99:96:74:8E:22:FB:6C:C1:34:21:BA:32:9F:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.217.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:64:d3:04:8c:93:c1:46:d2:72:33:57:0d:14:a2:d2:c3:29:
11:76:d8:1d:f7:4c:ff:54:3e:d9:5b:89:ee:53:01:32:91:2a:
d3:e5:28:9d:ba:b2:14:e9:ea:a0:30:2c:5c:ca:4b:73:0b:d4:
c1:37:9a:f6:84:fb:3a:e7:57:f3:46:34:9c:27:ae:1e:1f:d7:
e6:ef:8c:48:0c:76:ec:d8:45:be:1c:11:e2:d2:22:4b:35:9d:
63:d6:6d:2e:0b:8d:f1:5f:72:95:88:ca:26:30:2c:29:61:eb:
31:5b:25:30:f2:61:f1:22:07:79:c7:0c:49:a3:8d:3f:0c:b3:
93:cc:2e:4c:b5:a3:a0:e4:08:ab:93:11:fb:37:c3:e6:a6:dc:
c8:16:ab:36:70:54:46:cb:b8:a7:5d:50:14:99:b2:46:db:72:
e5:9f:bf:8e:2f:18:1b:f3:c2:fe:22:88:04:d6:e6:71:f1:b2:
b7:f0:fa:d8:c7:17:a0:0e:37:d8:53:60:24:d9:d3:75:3f:80:
a3:09:87:fe:84:7a:b0:7a:30:f1:48:ca:73:e8:86:40:8c:6d:
77:24:15:ee:b6:d8:49:c0:4b:e2:b0:f1:44:2d:6d:c4:e1:85:
2a:da:65:03:76:5c:0a:86:1e:8e:26:64:b3:99:1c:08:45:f3:
b1:c2:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:15 2025 by rpki-client