Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa
File: 80176c29-2db4-33cf-b400-b52a4a80cd03.roa (raw, json)
Hash identifier: utpeCY2Vu4GMgiueIWTCQchUPRjJf2if5j9jPdzPtjo=
Subject key identifier: EC:87:35:60:B2:35:A7:2D:02:BF:FC:0F:FB:B0:77:5B:27:99:93:D9
Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a
Certificate serial: 010D0C9F43285849244E7E39E1D1DA18BCE22F40
Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 208.71.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7e:39:e1:d1:da:18:bc:e2:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=46a520d2-0e7b-4401-91b2-306cc2f08905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:a2:34:14:fd:01:bc:62:d1:2b:1c:73:c8:
6d:12:d0:f4:84:d4:34:98:77:e3:4c:6f:4c:e7:aa:
7c:7e:91:13:3c:8a:07:08:33:e0:0b:c9:0a:45:00:
54:f5:52:05:b8:41:96:53:10:d2:a1:84:8a:66:04:
e0:ce:51:f9:78:b3:8d:bb:65:94:f2:15:06:48:0e:
c1:85:e3:65:4e:48:e7:b5:b4:85:f5:cb:64:fc:92:
94:b8:9b:a4:05:be:7a:21:11:d4:99:da:fb:f4:6e:
bd:99:14:26:67:b9:e3:87:f5:43:b6:a8:75:4c:f0:
7e:12:ea:08:17:92:bd:80:af:24:ac:73:42:5b:21:
d4:7d:56:1d:97:5e:58:02:fe:77:63:f1:b3:c3:d5:
64:04:fc:c9:ca:4d:5c:64:13:6b:be:b5:10:da:57:
04:60:12:92:a8:cd:64:77:61:ec:4a:27:ae:9a:be:
39:40:38:81:66:db:19:f1:65:38:a0:36:19:08:f0:
b3:17:50:bf:cd:a8:0f:d0:e2:1e:e0:a7:b6:1f:7f:
d5:88:2a:35:66:df:ac:bd:af:ba:76:21:db:fa:7b:
bd:d8:43:83:78:94:c7:b6:38:1a:ce:15:9a:57:5a:
7c:bf:be:a5:b4:50:ab:78:6d:bc:60:49:6e:ef:7d:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:87:35:60:B2:35:A7:2D:02:BF:FC:0F:FB:B0:77:5B:27:99:93:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl
X509v3 Authority Key Identifier:
keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer
sbgp-ipAddrBlock: critical
IPv4:
208.71.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:a8:5d:db:cf:ea:c1:80:d8:94:97:5c:93:1c:83:11:79:6d:
73:7f:58:c2:22:83:38:36:db:e7:6f:af:7f:22:55:ef:73:0b:
ae:c1:26:13:56:a1:bc:ff:56:30:4f:42:a3:06:93:dd:d9:18:
96:44:51:68:4d:99:e3:87:e0:ba:3a:81:86:d8:7c:1b:28:71:
46:ed:ae:37:c5:47:cc:d0:a9:63:09:a5:57:0b:bb:42:54:6c:
da:aa:39:dd:52:56:4a:25:ae:00:ee:9f:ed:00:69:19:2e:fb:
f9:d4:c5:9c:81:d0:c5:2c:ef:a1:d3:6c:8d:f0:8b:ed:4a:79:
fd:d3:c3:e6:19:4e:cf:bf:c1:70:bd:46:39:d9:5a:63:e4:ea:
ce:74:34:a7:56:2c:71:c4:28:72:04:b3:b5:e5:0d:be:bd:67:
a4:ae:8a:81:87:8e:77:6c:7e:1d:62:7b:42:3e:de:1f:36:42:
a7:e4:1d:44:54:4c:d6:77:b2:99:b1:04:65:e4:d0:0b:1d:a7:
c6:4c:89:64:68:a6:f1:9d:37:ad:95:79:37:9b:94:13:b0:5f:
c5:bf:8d:0d:75:e3:a0:b5:5e:9b:93:7a:16:a8:4a:ad:d4:1a:
b8:9b:8a:04:03:e1:a6:54:ac:ab:b6:bf:7c:0d:a7:c6:e4:fb:
98:0e:fb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:05 2025 by rpki-client