Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e3039b73-c17c-3972-b068-a15a1e8b7670.roa
File: e3039b73-c17c-3972-b068-a15a1e8b7670.roa (raw, json)
Hash identifier: 1ji8HhN44tlFOlZvU1pNesvsU3s3/E84lwlUL936PfU=
Subject key identifier: A4:4E:A0:1D:4B:C9:55:0F:6B:AA:22:31:57:C8:CB:FC:32:F1:8D:C5
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848F65BDC856DCBA1E0C5AF46DC
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e3039b73-c17c-3972-b068-a15a1e8b7670.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 14618
IP address blocks: 208.127.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:dc:85:6d:cb:a1:e0:c5:af:46:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=3e14ae7d-aa91-4018-9be3-9cdf6fc3bddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:27:09:2e:c9:54:c6:97:86:79:87:a9:f5:
5d:b0:fd:c4:97:ba:bd:e2:f6:59:6f:f7:77:41:da:
af:80:ab:c6:5b:59:63:51:c9:7f:16:ae:08:ee:d7:
04:ef:84:f0:f4:e1:69:99:a3:ed:56:13:cc:01:22:
b9:bd:f4:ce:19:27:be:d4:14:cf:4e:01:b6:9f:02:
aa:59:20:6a:dd:f0:64:a7:e4:1b:f4:b3:ab:a1:51:
56:85:d3:e7:c8:cb:3a:2c:1b:a9:75:44:90:da:85:
94:c6:bb:ba:66:60:11:6f:68:79:d5:a8:fd:ea:ce:
19:6a:e9:56:f9:7e:c5:50:84:a0:f6:1b:1b:6f:af:
09:16:82:ff:db:69:31:51:48:e5:97:56:58:5a:a7:
57:57:15:ee:11:ca:6d:5c:d1:cb:be:f0:3a:a1:e1:
05:05:23:36:cd:9f:e2:bf:60:d2:d6:47:1e:e1:99:
af:a0:67:a7:59:cd:aa:b6:cc:8c:9f:80:97:2f:e2:
da:fc:4f:30:09:62:17:69:03:f6:6f:e8:d0:7c:62:
60:9a:ec:d0:f0:ba:cd:b6:93:fd:ae:e1:7e:f0:54:
e8:df:9b:1b:8f:0f:87:bd:b5:81:94:15:88:79:02:
a8:1b:a5:33:11:77:9e:f5:e4:e5:fa:75:5f:86:0a:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4E:A0:1D:4B:C9:55:0F:6B:AA:22:31:57:C8:CB:FC:32:F1:8D:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e3039b73-c17c-3972-b068-a15a1e8b7670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.127.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:64:22:4b:84:40:38:8f:9d:1f:15:93:97:79:a8:6e:96:69:
1b:00:f4:da:1d:b2:fc:7f:de:75:b0:0b:92:c5:97:71:c1:03:
ac:74:57:9a:61:ac:50:be:54:4c:08:53:59:53:f4:d9:8a:bc:
65:5f:8a:04:d1:ca:5e:32:85:e9:56:ff:d0:70:fb:d4:4b:5f:
47:ee:86:09:90:d3:31:97:2a:c3:7d:97:15:29:ee:70:d2:43:
82:59:b0:08:a3:d8:e2:d8:5d:97:59:da:e7:06:9e:bd:fb:aa:
f7:98:04:26:75:f9:d6:d8:2b:f5:21:a4:41:8d:f8:65:98:45:
fb:e5:13:8e:b3:76:1a:ed:7d:bd:b4:48:21:9f:76:7c:a6:96:
7b:07:cf:3c:22:9f:80:33:a9:40:c6:fd:13:02:66:b4:c6:a5:
8a:88:c3:db:50:33:2c:89:de:28:e1:58:94:e0:3d:64:8b:59:
24:0d:91:81:97:c8:3d:8d:bf:23:e8:20:95:4a:a2:8f:35:af:
d0:e5:4a:09:71:7f:64:cc:9e:07:34:7c:69:c1:3c:52:7a:d9:
c6:57:ec:bf:44:d7:c3:c0:4e:af:60:ad:30:af:59:3c:48:c5:
af:04:6f:3f:b5:ad:01:cc:2a:82:85:4d:40:0d:56:ca:ed:6b:
0c:55:4c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:45 2025 by rpki-client