Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ab5ad124-c1af-36b0-b848-92deba0cf07c.roa
File: ab5ad124-c1af-36b0-b848-92deba0cf07c.roa (raw, json)
Hash identifier: iRuwLBFjKRanilcOY/CVb3h9lipY6PMMoZEIZJTOrlI=
Subject key identifier: 97:85:D3:94:94:DF:F3:CF:D0:91:34:B2:5A:C1:A8:20:4D:BE:10:0C
Certificate issuer: /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial: 010D0C9F432858489075F1EFBB4B1AA3C4F93DE0
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ab5ad124-c1af-36b0-b848-92deba0cf07c.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 16509
IP address blocks: 208.71.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f1:ef:bb:4b:1a:a3:c4:f9:3d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=9d88fd72-9198-4931-a143-4f9c12ae90c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:c2:cb:bb:2a:51:9e:9e:44:7e:23:2a:11:
ef:62:5a:1f:ab:95:06:63:8f:cb:fd:f5:19:a7:ef:
d4:a7:4a:e3:7f:fb:27:ff:09:f2:25:19:23:5e:c9:
14:13:52:8d:78:5f:22:3e:26:3f:7f:c4:33:36:9b:
6f:cd:b3:47:56:a2:8c:d0:69:1f:93:e9:20:37:55:
92:d7:22:e3:8a:e4:82:5d:04:e1:63:c6:af:ad:a2:
db:43:05:63:1e:61:7c:7f:90:58:15:61:08:a4:17:
e3:38:3b:dc:20:78:31:51:f2:7f:35:62:26:9c:1d:
ca:96:2c:19:fa:82:85:12:ac:cf:77:1c:1c:d9:a1:
b6:11:f5:70:cc:5d:7e:c4:08:b4:d9:98:a1:a5:e4:
91:ee:de:22:d2:7f:4a:c0:71:fa:03:35:3f:c6:56:
7c:a4:81:d6:e5:06:e2:55:ae:cb:86:a7:c6:87:8e:
9c:78:01:c0:f0:7a:95:74:b3:c3:fb:fd:88:71:f5:
9a:20:f1:44:dd:68:78:30:aa:24:dd:f3:07:4a:44:
b1:97:87:51:18:c1:7f:96:09:6a:ba:cf:1c:44:de:
9b:9e:8b:18:5c:75:2c:36:51:8f:8e:c4:f7:f3:41:
08:3d:3a:f1:46:f1:68:59:2b:13:ea:8c:54:d2:d2:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:85:D3:94:94:DF:F3:CF:D0:91:34:B2:5A:C1:A8:20:4D:BE:10:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ab5ad124-c1af-36b0-b848-92deba0cf07c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
X509v3 Authority Key Identifier:
keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.71.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:03:d4:97:5f:73:85:10:c3:db:ce:02:bd:09:af:ee:21:0e:
c7:a2:96:a4:f5:cd:c5:99:f8:65:37:27:0a:fc:78:55:2f:b7:
53:39:52:81:d3:aa:da:05:4f:71:6d:30:a2:6b:4e:78:f2:b2:
f1:38:19:7d:f4:7c:0f:b6:da:a0:24:80:0a:f5:02:66:d9:c5:
d6:c8:99:ae:48:6c:f1:76:68:d5:71:cc:8d:48:02:98:e4:d0:
af:a6:5d:5e:18:20:d6:7e:79:7f:cb:66:e1:91:87:e2:5c:6b:
ef:d0:ab:e1:59:26:e3:82:34:3a:b6:78:99:49:20:09:7d:57:
aa:57:57:07:30:8e:37:c6:6a:e6:d8:ae:7f:13:cd:1e:48:01:
e6:86:76:0f:ed:3d:b6:bf:df:e6:38:05:a7:f8:11:bd:99:97:
cd:c0:95:2d:6a:1f:01:66:32:0c:6c:e5:e9:ae:ff:ed:5d:e0:
dd:38:17:df:11:43:52:ed:77:a5:50:ab:61:b9:7b:2d:13:1c:
7d:57:fe:39:c5:63:38:d2:fd:e7:38:f8:09:8b:58:9f:51:bb:
0f:a4:e9:08:53:a4:7c:fe:83:d8:6c:90:59:12:9f:ab:9d:9f:
2e:f5:fe:f5:8a:f3:ea:3c:3a:61:f3:fc:25:dd:87:4b:0b:a1:
57:52:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:30 2025 by rpki-client