Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa
File: 9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa (raw, json)
Hash identifier: YEuyEcqgCsL3lHsqYO69/g3gUAcepJtMMcjz5zLpX3s=
Subject key identifier: FC:12:FA:7B:47:50:23:DC:F3:F3:CB:52:68:EA:15:D8:C5:C9:2E:AF
Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624
Certificate serial: 010D0C9F432858491246C7C311A8F9FBB83D8160
Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 3565
IP address blocks: 208.68.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c7:c3:11:a8:f9:fb:b8:3d:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=6a1a95be-549e-48f1-aefd-6633c66bce79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e2:a8:cd:ee:20:73:f1:c1:4f:9d:9f:05:79:
59:d6:72:2e:3d:dd:30:cb:32:00:43:c7:22:4a:5b:
87:65:94:05:ae:08:ec:d0:43:71:f6:83:42:86:d2:
36:40:c0:89:ed:f0:75:18:54:b7:6c:9d:46:57:41:
49:4b:bf:e0:b1:36:e0:54:3b:58:e9:25:69:62:1e:
4d:83:c8:73:19:94:7e:7e:fa:2a:7e:46:5b:91:44:
da:32:c2:88:40:6d:7e:2f:b2:8e:3a:b1:d0:fa:36:
76:55:9c:db:ca:f0:2d:fa:fd:52:02:19:57:64:10:
e8:fd:2d:1b:b6:35:35:5d:9f:a3:57:90:33:a2:ea:
48:19:54:ea:e5:12:40:94:7e:1a:6e:62:f1:ba:3e:
7a:fb:d8:ee:38:40:fb:dc:cc:3f:5b:31:c6:e1:67:
87:47:b6:cb:d4:3f:83:a0:e8:ca:43:10:b7:e5:be:
f4:68:6e:3e:86:78:bf:4a:11:0d:5b:26:87:11:73:
8a:a8:c4:18:81:4c:0b:14:21:4f:6e:37:dd:b9:df:
4c:95:73:e9:94:95:62:0f:6c:a5:33:16:d6:f6:91:
93:49:3e:2a:bd:e1:d5:a3:2a:21:f5:69:2c:8c:39:
f7:52:5d:c8:4c:ad:79:a8:85:9e:4c:39:3e:32:cf:
e4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:12:FA:7B:47:50:23:DC:F3:F3:CB:52:68:EA:15:D8:C5:C9:2E:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
X509v3 Authority Key Identifier:
keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:f6:1b:c4:1e:87:8a:fb:97:f3:27:37:40:d1:b3:38:67:dc:
8d:2f:10:10:be:45:b7:4d:e7:e6:9d:9b:bb:09:d4:ed:84:2c:
77:e5:59:f5:2b:db:6d:da:6e:88:ea:f2:ac:98:46:a3:b3:e3:
91:c8:ff:74:6e:7d:33:11:9a:4b:6d:32:77:f3:25:b6:e3:a2:
23:f9:3b:cd:fc:26:44:90:b6:cf:41:21:82:0a:bd:71:09:1f:
91:53:12:bc:ce:89:9b:71:ae:ce:d1:25:3e:06:70:d4:5b:a2:
81:f9:ce:cb:d0:da:2d:ca:ec:91:cb:86:ca:87:15:78:26:76:
10:b0:e2:76:f8:a0:70:ed:f1:a3:c9:b4:23:9d:96:58:dc:43:
e5:3d:c8:41:c1:3c:ef:a5:37:f7:15:aa:88:a6:4f:bf:ee:97:
96:0f:02:16:4a:f8:eb:34:aa:5d:53:39:48:2e:bf:5e:6c:90:
76:02:bc:0a:98:f2:b4:e5:4b:95:db:81:c5:6a:df:55:30:fb:
f7:1a:89:6f:69:6f:a4:bc:b5:52:84:cb:93:e7:a3:fa:70:6b:
9c:44:60:72:98:47:f0:aa:fd:30:de:88:cd:36:b1:36:9e:1f:
ad:f3:28:52:87:13:3e:f4:01:d3:87:49:a0:21:95:42:4f:56:
3b:b2:c3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:43:32 2025 by rpki-client