Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8b5ba83f-2ede-36e4-be67-19030f7debb0.roa
File: 8b5ba83f-2ede-36e4-be67-19030f7debb0.roa (raw, json)
Hash identifier: MEXV7GsjKzud/2w05bNo+nWAiTOzv47rXdYIhSR1C/E=
Subject key identifier: 8B:30:04:16:3E:EF:21:5F:8A:D5:A3:02:2F:EE:99:2C:1E:29:68:A2
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F43285848960B521132F1FD4445D81E80
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8b5ba83f-2ede-36e4-be67-19030f7debb0.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 400318
IP address blocks: 208.54.22.0/24 maxlen: 24
208.54.23.0/24 maxlen: 24
208.54.33.0/24 maxlen: 24
208.54.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:52:11:32:f1:fd:44:45:d8:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=87d89282-e8ba-4d63-9fcb-11485d5f7031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9f:78:de:88:e7:c6:67:a7:1a:1e:85:08:c9:
be:7f:bc:5b:08:5b:18:b3:83:2b:d3:20:a2:ee:c9:
bd:d7:77:25:a8:22:e4:76:b4:81:0d:17:3f:93:7a:
a0:c3:cd:ea:2b:7a:f4:ea:13:26:69:25:f6:fa:44:
52:2c:7f:a5:81:cf:bb:b1:a2:ca:bf:9a:42:55:5a:
46:02:80:bd:04:75:f1:1b:9c:81:08:8b:0f:98:90:
be:84:eb:72:a0:ae:c4:9d:f7:71:66:e2:cc:2f:14:
b7:bf:96:5e:36:fa:29:ce:e1:54:52:ff:21:2e:ce:
6b:6e:27:82:43:a9:6d:f9:31:58:b0:d7:95:7a:67:
e0:7c:5f:50:09:75:09:cb:19:19:a5:cd:27:1b:2c:
09:b3:62:59:e2:0e:44:f9:f5:93:90:e1:f2:14:aa:
22:ba:e8:d9:ec:67:cd:04:b7:93:4a:9d:5a:d9:37:
e4:2d:b6:66:0c:6f:51:1b:5b:7c:c5:ab:5e:95:02:
29:38:d6:44:8a:6f:14:98:e2:b8:a3:72:14:a8:04:
dd:21:00:db:f7:69:df:e5:d0:45:d3:81:29:91:c9:
c1:c6:bc:2a:60:56:e1:d5:5d:29:65:12:23:ce:09:
6a:38:ad:b5:7c:5b:de:91:65:75:08:80:6d:f0:3b:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:30:04:16:3E:EF:21:5F:8A:D5:A3:02:2F:EE:99:2C:1E:29:68:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8b5ba83f-2ede-36e4-be67-19030f7debb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
208.54.22.0/23
208.54.33.0/24
208.54.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:13:cc:53:dd:c0:6a:82:28:24:65:be:18:9c:57:7d:2d:08:
02:66:b5:d0:e1:27:6d:cc:bf:2a:b3:4b:04:ff:97:9a:61:22:
fa:6f:0d:5b:86:10:a9:a0:91:ff:47:df:ec:69:a1:84:74:2e:
98:76:2f:37:30:1a:a3:91:b4:c9:a2:c4:a8:45:b8:c0:09:d7:
f2:11:75:92:7e:58:e7:69:08:4a:6c:b2:2d:f6:5f:2e:9e:23:
6b:9b:6f:11:56:59:41:07:80:1b:09:2f:86:d9:0f:65:a2:0b:
c7:63:73:e0:ec:da:86:0e:c2:ad:e9:a1:a1:90:94:76:9e:95:
c8:02:18:62:0d:c4:ba:6a:b7:ba:7d:5e:ad:00:77:ac:4f:06:
c7:f2:c7:7a:dd:1f:f4:58:e0:38:59:08:e0:d4:c7:d1:09:9a:
dc:25:36:dd:fb:cb:b9:95:d8:9f:89:21:1e:1b:4f:aa:47:d1:
b6:22:e0:25:e7:4b:32:15:38:ac:98:1b:3f:93:66:61:8e:db:
d7:05:30:82:9f:f1:59:c3:81:11:cb:60:bd:7b:ea:93:32:47:
c3:48:5e:3d:20:86:9d:a6:59:a2:04:39:75:b4:14:b8:37:c6:
1f:ff:13:5b:2f:b2:12:37:31:00:ed:ba:2f:23:20:31:60:f5:
6b:40:e6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:08 2025 by rpki-client