Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9d90aef9-02c7-3727-846e-6ace0a388a9f.roa
File: 9d90aef9-02c7-3727-846e-6ace0a388a9f.roa (raw, json)
Hash identifier: fczfIyAITB3dNqfgJkHzQlz1SAulF+8CAenH29ghmss=
Subject key identifier: 9B:31:27:DF:35:22:45:D6:42:E6:CD:A2:DC:BE:72:F6:F1:0D:E4:5E
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F432858487755D9786F41EA6AD5D87700
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9d90aef9-02c7-3727-846e-6ace0a388a9f.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 16509
IP address blocks: 208.85.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d9:78:6f:41:ea:6a:d5:d8:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=41005f28-17d0-4a19-a761-fc7fb3aeabfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f3:07:0e:5d:23:31:fb:30:82:78:0b:1d:ae:
71:91:24:f6:2e:96:fb:dd:62:34:1d:8c:f0:cc:ef:
2d:c2:78:80:7f:19:68:5b:da:1d:c1:45:50:70:4b:
89:8b:ee:49:95:b5:82:67:a1:32:90:4b:54:6d:32:
12:4e:c4:4d:d1:76:4b:09:0d:f6:d4:ca:6f:58:d2:
58:50:e7:d3:35:ef:e0:65:ee:ad:3b:76:b2:22:3f:
f5:db:eb:43:e2:ae:ca:ce:5b:52:1b:70:eb:ce:b3:
00:e2:26:73:9c:3a:54:4c:49:6a:dc:2d:16:e6:2d:
14:49:66:4b:26:8f:49:00:da:a0:99:5f:77:ba:7d:
85:08:f9:8a:82:1f:58:e4:32:30:17:21:24:6a:57:
c7:6e:00:a5:39:33:5e:93:2f:6b:b5:f8:2d:bf:f8:
76:b2:02:c8:7a:1e:ce:59:76:1a:3a:38:f1:21:28:
93:d9:72:15:aa:62:98:e1:4b:84:f9:e2:3b:b0:c1:
d2:08:6c:61:f7:54:02:27:f7:55:70:e0:f9:21:ab:
ea:72:ad:d2:65:30:ac:6d:ed:c5:6e:1b:47:aa:80:
23:1a:a2:2a:2e:a9:0a:32:67:85:a7:23:1c:45:b3:
cf:15:e6:a2:09:37:dd:39:a2:12:0e:89:67:5f:41:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:31:27:DF:35:22:45:D6:42:E6:CD:A2:DC:BE:72:F6:F1:0D:E4:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9d90aef9-02c7-3727-846e-6ace0a388a9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
208.85.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:e0:30:6b:29:cf:6c:3a:6a:b7:94:af:40:0c:07:7a:8b:4f:
30:a8:06:44:c5:15:5d:e3:cc:91:db:d3:3a:d3:0e:49:46:8e:
c4:49:7d:85:37:b2:e3:1d:bc:53:28:a3:b9:37:e2:da:70:04:
c6:93:af:4e:89:6b:4c:3f:82:0c:30:50:2e:43:2f:d8:49:89:
2b:0e:7e:6b:50:39:c5:92:b1:ed:11:0c:19:a2:0b:94:c9:19:
ae:58:1d:fd:c7:81:f7:32:b9:c2:d8:8e:34:d0:cd:ae:a3:aa:
e8:43:88:04:d0:ee:29:fd:a4:70:29:1b:de:c7:4a:51:f2:64:
09:60:e6:03:57:8d:f4:44:4e:3b:98:eb:b4:c3:a9:cb:f2:1f:
b8:62:18:33:79:3e:e0:9d:9a:d1:3a:f5:c9:76:06:91:c1:46:
dd:91:34:ca:42:3f:c7:4a:6a:2e:e9:b2:fe:2c:f5:67:7c:8f:
39:c5:91:44:4e:16:2d:f4:ff:48:5f:f5:eb:a9:5b:37:aa:89:
06:a9:0e:36:33:6e:90:75:78:a3:f1:32:59:f7:b8:f9:f3:f7:
ce:34:c4:b6:a4:9a:12:e0:5c:fb:ef:d6:fd:b2:00:3f:d2:38:
89:1d:83:c1:89:e9:da:31:6c:06:42:c3:18:01:3e:d2:5c:db:
9e:e5:4e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:23 2025 by rpki-client