Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/681429a6-9d83-32ac-9348-7096d4902a19.roa
File: 681429a6-9d83-32ac-9348-7096d4902a19.roa (raw, json)
Hash identifier: Ahl3GoRRoHff9IDbLgO7E4aLMmG4PkjzTnEaCjvuRu0=
Subject key identifier: 5C:61:9E:C0:7F:2A:FB:9B:52:21:D3:3C:21:1B:81:B5:FB:89:DC:9E
Certificate issuer: /CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
Certificate serial: 010D0C9F432858489D05E67B32B120E69F611E40
Authority key identifier: 07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/681429a6-9d83-32ac-9348-7096d4902a19.roa
Signing time: Tue 21 Jan 2025 02:00:39 +0000
ROA not before: Tue 21 Jan 2025 02:00:39 +0000
ROA not after: Mon 21 Apr 2025 01:00:39 +0000
asID: 18451
IP address blocks: 208.81.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:05:e6:7b:32:b1:20:e6:9f:61:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
Validity
Not Before: Jan 21 02:00:39 2025 GMT
Not After : Apr 21 01:00:39 2025 GMT
Subject: CN=411ebde2-8068-4936-871e-0a7deb5586f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a1:e8:a4:34:fa:d5:a5:2e:71:af:3a:0a:1a:
8e:7f:7c:19:c8:66:77:80:e2:c4:7c:5f:0c:a4:ad:
b7:bd:39:ed:ba:63:45:e0:2b:ea:5b:6b:a3:a1:49:
d1:12:45:aa:a9:ea:dc:6e:22:ec:a8:9d:94:2d:b4:
bc:ff:76:1a:62:a3:e7:21:e4:cc:ca:27:f5:3c:b8:
00:d0:e8:d5:67:1b:83:81:bc:fc:97:c3:79:b5:63:
73:e9:4f:e9:87:55:24:45:b2:ee:f0:67:00:4b:92:
dc:9a:d3:52:cb:4b:75:15:c8:bd:7d:f2:9d:4c:2d:
ba:7f:a2:1d:b0:29:ef:17:90:50:25:5f:ea:f8:e4:
1a:62:37:d5:5e:7f:02:de:66:90:fe:44:0c:6b:1e:
49:64:72:af:5d:e8:af:b1:d2:0d:50:5d:3f:b2:4f:
90:a6:d8:b6:40:3a:40:41:d2:5b:46:b8:0f:88:62:
28:68:84:d8:b6:69:04:b0:01:be:89:e5:96:3d:a3:
3f:d2:8d:17:fa:8e:c9:be:91:55:7a:56:26:9f:dd:
f2:2c:7a:5e:f3:c9:f4:f6:ec:c8:ea:fe:00:dc:21:
32:a7:3c:79:8e:bd:7a:2b:ff:1a:f0:00:6e:b5:7f:
d8:a2:7a:d4:16:6e:e0:09:89:79:60:98:f5:c5:90:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:61:9E:C0:7F:2A:FB:9B:52:21:D3:3C:21:1B:81:B5:FB:89:DC:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/681429a6-9d83-32ac-9348-7096d4902a19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl
X509v3 Authority Key Identifier:
keyid:07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
sbgp-ipAddrBlock: critical
IPv4:
208.81.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:f4:11:a2:56:36:d4:14:ec:cf:5f:8e:32:75:e5:ad:c4:d5:
39:38:27:d8:80:5a:7d:a4:89:0b:56:aa:12:db:7d:af:f6:4e:
f5:8a:7e:12:11:00:3d:e6:9d:01:e3:8f:57:3e:ae:29:95:de:
89:e5:0e:61:44:23:23:b6:60:fb:39:36:86:f8:c8:7f:9f:80:
ba:d2:dc:5c:c5:90:8a:15:73:7d:df:c7:d4:62:01:42:37:0a:
a5:f4:d0:53:aa:e4:9c:62:1b:0d:7b:56:df:b1:4b:f8:4e:1b:
f5:cb:22:7c:fd:e3:49:37:19:c4:3a:17:91:e6:15:ef:2f:35:
e8:f7:45:27:b9:77:d9:4f:ac:81:b4:a7:80:f6:5a:7d:eb:dc:
26:e4:e9:c3:bf:4b:99:88:20:55:43:7e:87:32:16:6f:aa:2e:
c5:a2:15:77:34:e6:df:6c:e7:dd:3f:bb:95:3a:2d:15:a4:7a:
e6:de:f3:a1:d8:14:1e:27:2b:dd:ec:68:01:9f:d4:cb:a0:de:
e1:ce:d7:c3:57:4a:90:36:e8:23:63:46:07:c3:4f:bb:ce:61:
4d:6e:68:a4:97:7f:7c:2b:c1:f9:90:c6:33:2f:1e:38:32:df:
11:a7:8e:2b:a7:4e:e9:79:cf:e6:11:f0:83:98:7d:3a:0a:d4:
db:cf:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:22 2025 by rpki-client