Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/bb64f222-c40a-3670-827b-6f5e2818ecee.roa
File: bb64f222-c40a-3670-827b-6f5e2818ecee.roa (raw, json)
Hash identifier: +vlVmwTa8V6O6pNNX+OMA2M921j82Vaw+UgmtQAwHSw=
Subject key identifier: E5:AC:EB:E4:FD:37:BB:34:E5:8F:7F:32:D3:E2:E7:40:47:84:99:ED
Certificate issuer: /CN=39fea962-7ffb-4d29-beb1-e588e6436410
Certificate serial: 010D0C9F4328584953C447FF5550D4F9674DFF00
Authority key identifier: C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/bb64f222-c40a-3670-827b-6f5e2818ecee.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 30247
IP address blocks: 208.97.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:47:ff:55:50:d4:f9:67:4d:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39fea962-7ffb-4d29-beb1-e588e6436410
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=7a57deb5-d76d-44d8-b118-bdc599e17141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:74:72:84:b7:76:bb:66:af:8b:e0:81:0e:
6f:b4:d1:7a:b2:f1:53:04:fa:c1:f6:62:5c:3a:af:
84:c4:fe:1d:4e:21:f1:cc:fb:1a:df:2a:53:90:ba:
9c:be:cd:56:93:fc:35:79:d4:f6:2d:36:09:71:df:
5d:8f:3c:8f:5c:07:01:06:f3:64:5d:75:12:5b:6a:
09:9f:e4:5b:30:8f:b7:7b:55:c5:e2:92:ac:c4:89:
a1:e1:f0:57:c5:fe:a1:0e:b9:bb:64:24:1b:ac:a1:
49:7e:98:30:88:9f:43:0b:1c:20:99:3f:8e:d0:09:
6b:5e:1b:03:4e:0e:50:be:f4:78:52:64:80:48:78:
4a:fe:9d:d6:51:68:f0:f1:a6:a9:c8:94:7f:3c:c4:
03:e9:b6:51:9f:37:e5:71:e4:42:a8:8c:6d:4f:a6:
e9:af:6a:ec:62:78:dc:5a:cc:a9:a3:57:70:a9:6f:
c9:d9:13:40:d4:ae:c5:e4:e0:d3:4b:12:3e:ba:9d:
78:2a:7e:05:a3:4c:87:95:f1:05:60:d2:f1:46:58:
1a:fe:1e:0a:df:11:5c:87:72:23:d6:49:30:b4:63:
4f:ce:0e:f6:51:1d:ad:f1:b4:7c:6b:da:6a:c1:16:
2f:dd:d7:15:11:a7:9f:83:4c:74:6c:19:94:18:b5:
6f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AC:EB:E4:FD:37:BB:34:E5:8F:7F:32:D3:E2:E7:40:47:84:99:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/bb64f222-c40a-3670-827b-6f5e2818ecee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.crl
X509v3 Authority Key Identifier:
keyid:C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
sbgp-ipAddrBlock: critical
IPv4:
208.97.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:b4:51:ca:87:86:d9:1c:dc:6f:77:8d:88:47:46:23:5a:fc:
7a:67:76:c1:ca:cc:10:17:fd:ce:da:11:ee:e2:5d:35:50:27:
b2:a3:22:88:e8:61:76:40:5f:c0:ae:ac:8d:96:58:14:a0:f2:
13:d1:01:0a:f5:64:d3:0a:4d:ab:7f:fb:28:0f:94:ab:cc:01:
d0:53:2c:e8:d2:15:d1:63:2c:43:b9:3c:ac:dd:36:69:dc:e7:
da:54:ef:b3:17:cc:27:3e:97:ce:b3:c5:c0:69:fd:65:ec:a8:
6f:63:0e:e9:8d:8a:4d:09:a9:46:77:51:38:99:e6:92:03:4d:
b6:19:61:66:d4:3f:22:4c:2b:0e:1c:fe:99:df:e9:42:0e:f6:
de:07:47:f2:be:1e:8e:e3:79:61:3c:46:3c:f6:89:be:0f:f0:
5f:d8:aa:36:33:eb:29:11:12:cb:c7:90:ff:ca:fb:e1:dd:7f:
af:f1:a1:2c:87:c3:0f:68:65:2e:f6:b6:3f:67:99:4d:c9:80:
80:83:4d:1f:c7:3f:5b:ac:a1:f3:65:89:29:13:3f:de:e9:3b:
0f:2b:83:c5:52:81:8a:ea:da:13:6a:0d:d8:ff:66:ac:a5:83:
46:31:81:46:65:63:27:7e:a9:96:db:42:25:98:f3:9b:3e:47:
fd:09:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:38 2025 by rpki-client