Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa
File: 350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa (raw, json)
Hash identifier: VGkgoRa7/cF16fRGiiXKbzfFRypIF6vLvUW+A6tCZds=
Subject key identifier: 0B:59:C2:A1:08:C4:81:59:BF:1D:1B:94:F8:B5:EC:5D:5A:53:2C:2A
Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial: 010D0C9F43285848100A7BC79A143D02B4271F00
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 6639
IP address blocks: 208.157.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:7b:c7:9a:14:3d:02:b4:27:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=6d997f30-bf5c-4a26-a429-492ec0ba00dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:06:3a:e0:ea:e7:dd:f7:bf:95:f3:f0:bb:6a:
16:ea:e0:4e:97:f7:48:69:d7:18:f8:2b:55:df:bf:
02:78:b0:99:b2:35:14:0a:f3:3b:e4:5b:99:98:ae:
73:00:80:02:60:86:68:85:eb:1a:ff:ae:c2:81:d9:
4f:dd:92:65:98:bc:69:f3:9e:0c:59:1e:0e:2f:77:
d3:08:e1:81:99:a5:c9:83:ef:31:8a:c4:e9:4d:83:
71:ac:f2:bf:ea:32:17:13:0a:d1:50:53:61:1e:0c:
f4:ce:4e:da:30:5f:0f:d1:44:29:39:31:f5:d8:fe:
7e:34:9f:3c:a7:ac:03:a6:ce:a9:89:76:60:a5:9a:
07:0d:04:c8:d6:10:c4:43:39:55:f8:da:4a:37:9f:
cc:68:1c:21:73:24:e1:eb:21:44:22:31:b1:a4:5e:
4b:b2:56:ed:f0:02:c4:31:2c:78:21:df:9c:77:3f:
23:1f:de:38:2c:f1:ea:7b:35:dd:48:cc:de:84:0c:
e3:6b:f5:23:4f:8c:3c:ce:3a:dd:fd:63:b1:9d:b8:
67:16:05:c3:81:c2:4e:90:b0:92:b6:c2:ab:a5:07:
a0:64:6d:e9:9a:bd:f7:87:04:9e:cf:10:7a:22:d2:
19:d7:f0:db:34:80:af:6d:0b:c4:38:ac:47:04:85:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:59:C2:A1:08:C4:81:59:BF:1D:1B:94:F8:B5:EC:5D:5A:53:2C:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
X509v3 Authority Key Identifier:
keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
sbgp-ipAddrBlock: critical
IPv4:
208.157.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:15:97:5d:1d:4c:60:b8:bd:b6:74:dc:6e:8a:66:6e:6d:f3:
e8:d0:c9:5b:ab:3a:5e:57:eb:34:0d:5b:53:f0:73:71:7f:a9:
64:f3:c3:3c:b9:0c:76:21:91:83:d3:12:ad:77:0d:ac:58:64:
78:96:fe:af:4f:15:99:92:35:27:e9:49:69:3d:df:e0:d9:bb:
1a:9c:c2:ae:f5:29:bb:d8:89:ad:b0:4a:9e:38:45:f8:dc:56:
b0:9a:21:49:a1:89:a8:6f:97:26:8c:53:45:48:38:86:6d:30:
dd:6a:59:ef:6b:59:62:12:a0:43:2e:f0:9f:c4:80:98:60:78:
b8:51:3f:6d:be:00:2e:79:3a:c0:cc:ea:74:b0:11:14:de:34:
f6:26:8f:12:33:0a:ab:f3:21:2a:43:07:c1:b2:d9:08:ef:9c:
38:af:5b:de:39:aa:a8:9d:ca:a9:5b:ef:24:99:55:ec:8b:9f:
fb:4e:5c:06:25:e4:55:d3:59:6e:92:cc:a8:49:35:44:3c:b3:
38:33:6a:88:26:d2:a0:42:75:6d:90:8d:9e:da:52:27:2a:83:
2c:f9:18:71:09:0e:be:5f:4f:ea:93:a4:6a:77:38:32:5c:cc:
8b:3a:9c:cd:29:78:2d:6e:6b:f8:62:34:6e:79:03:e9:b3:4b:
e3:d8:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:43:53 2025 by rpki-client