Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa
File: b22abd72-0314-3d31-bb53-c6c482f407aa.roa (raw, json)
Hash identifier: H7Q07Sb8AKWMumLipQD+LIuX4GEXo5xpcyesCZB5qv0=
Subject key identifier: 26:1F:5F:72:8D:EE:79:1B:4D:E7:7D:EA:9A:CE:25:62:57:58:29:A8
Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
Certificate serial: 010D0C9F43285848E59BC395E717DB529EA9F660
Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16509
IP address blocks: 208.79.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c3:95:e7:17:db:52:9e:a9:f6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=22432449-a9d7-4a4e-833c-6e64223a5a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:57:ad:c2:26:d8:e5:aa:4b:c0:c5:8b:73:
90:1f:77:3f:bc:0e:78:77:43:65:c9:12:b8:77:f4:
0c:54:5d:29:40:fe:4a:9f:17:e8:8b:f3:ac:95:43:
82:f0:4c:1c:58:bd:5a:31:4a:11:43:67:c9:8d:dc:
3a:65:4e:7c:5f:8e:e5:83:d9:c8:1e:b0:ea:3e:92:
d7:6c:19:48:31:47:bd:fd:f0:49:02:da:53:b4:88:
f5:f5:b6:6c:b7:84:19:68:8f:42:5c:73:36:93:c5:
a5:79:eb:b1:3f:b2:44:a2:f9:80:16:9c:07:45:6e:
24:ae:44:54:70:34:68:26:d6:bc:6e:4b:95:b5:fe:
57:af:43:f3:36:fe:f0:6c:31:7f:a8:b7:35:9c:4e:
75:3a:4f:e3:8b:99:8f:56:ef:51:10:c2:bd:45:fd:
b4:b1:38:0f:a7:75:03:2d:70:a3:8c:79:44:a6:de:
8f:1b:03:98:19:74:f7:97:63:5b:f4:45:a2:1f:bd:
44:8c:42:c4:14:56:49:27:3a:f8:f5:46:ce:4e:7c:
f1:d0:e1:62:50:15:9b:dd:2a:70:b6:00:b3:d3:92:
54:c3:1f:6a:a2:4a:80:25:40:4c:87:b7:25:8a:fc:
f0:18:a6:39:df:67:98:51:81:79:51:bd:dc:0a:ca:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1F:5F:72:8D:EE:79:1B:4D:E7:7D:EA:9A:CE:25:62:57:58:29:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl
X509v3 Authority Key Identifier:
keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.79.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:a5:63:b3:cb:c7:d9:08:4f:b6:3c:39:30:75:52:0e:19:5b:
8f:cc:23:c3:da:52:25:5a:8e:08:9f:4c:23:21:b4:04:fa:e0:
da:ab:ad:6c:f5:3b:5b:12:7a:e1:47:ae:3a:f9:79:3f:98:be:
ed:84:c4:94:e8:3b:46:2a:a9:e5:aa:1d:5c:c6:de:a3:3e:16:
18:61:37:b8:76:e8:12:af:65:03:d1:f0:39:05:fe:83:ed:a4:
f1:d6:76:ea:da:23:6d:0a:2e:7a:74:98:2c:70:7f:5f:e7:dc:
8e:10:45:0f:0b:90:e8:70:74:77:9f:11:16:cd:5a:dd:84:b6:
e8:e0:bd:c4:07:c7:6c:8a:c4:45:53:40:5d:a9:fa:d2:2a:72:
dc:71:a4:c8:f4:cb:85:35:c3:21:52:0f:a8:bb:71:c1:f3:a0:
ed:02:14:49:40:3d:a5:1c:ca:31:72:35:6b:45:c1:09:d9:e9:
91:e9:00:69:e8:4a:b5:c9:38:6c:0a:2e:4d:6b:f1:48:29:15:
6b:59:84:79:b2:af:42:40:ff:da:cb:42:f2:a6:78:40:b8:8e:
0a:dc:18:32:21:2d:2d:5b:11:24:a2:56:f0:65:24:2d:f3:82:
f0:91:e8:ba:c9:9d:fc:3f:2a:e6:f6:9c:83:f6:b4:ac:06:65:
46:19:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:11 2025 by rpki-client