Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa
File: f2bf5543-269c-3fbb-bb59-b3484366fb78.roa (raw, json)
Hash identifier: QMlOnxMcuHz9SFi6Q9prLm/IQNTPrxGN0FS16wCjw34=
Subject key identifier: 7B:A6:CA:97:81:DE:7D:C4:3B:5A:95:77:42:33:77:0A:01:DB:E1:44
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F43285848C9B0DA69F09375533D277900
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa
Signing time: Thu 06 Feb 2025 02:00:39 +0000
ROA not before: Thu 06 Feb 2025 02:00:39 +0000
ROA not after: Wed 07 May 2025 01:00:39 +0000
asID: 398420
IP address blocks: 208.89.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:b0:da:69:f0:93:75:53:3d:27:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Feb 6 02:00:39 2025 GMT
Not After : May 7 01:00:39 2025 GMT
Subject: CN=e595e8af-bae0-418e-991f-4f8ddd140d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:92:d7:71:af:ab:5f:2c:26:83:09:6c:1e:
9f:8e:2d:1e:87:b0:7c:de:c5:c2:30:81:d5:5a:79:
eb:de:0b:08:b2:39:a2:37:b0:fc:fa:4a:ba:a6:9e:
09:b8:75:61:0f:d9:ee:f1:56:0b:22:90:6e:44:b8:
e7:08:b4:3d:4e:8e:ca:20:c9:c3:43:ac:87:f2:13:
73:8d:17:2e:20:8b:b6:85:16:5c:5e:19:de:ed:28:
71:51:de:95:b2:86:ec:ce:51:3f:10:1f:d4:0b:c9:
bf:72:4d:52:4f:93:4c:16:d4:d3:e3:35:42:67:ad:
6c:8c:18:ca:28:7e:86:ac:5a:5a:b5:ef:b5:fe:c3:
a0:86:5b:2a:4e:24:6f:47:17:bf:fe:25:b5:d7:6e:
80:45:cd:f0:2e:7a:fc:99:be:38:8b:5c:29:a2:10:
10:aa:a1:84:71:75:a2:17:d1:8b:0a:35:61:50:5a:
14:36:13:2c:3e:27:a5:fb:1d:7c:eb:ba:e2:3e:f6:
c0:4f:c4:99:30:ea:03:45:dd:2b:59:f2:fe:6e:b4:
7f:ce:49:8b:bc:b9:39:e8:b2:22:18:9d:09:8a:cc:
4d:0d:7e:d8:99:e4:b6:a8:72:09:1f:74:6d:eb:32:
20:8f:3b:da:5e:0c:42:6c:6d:d2:3b:30:e5:d5:bb:
04:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A6:CA:97:81:DE:7D:C4:3B:5A:95:77:42:33:77:0A:01:DB:E1:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:d3:f1:60:65:3b:83:ab:3d:43:42:f6:bd:e1:65:5d:22:98:
5d:b6:4b:26:a9:a1:76:79:90:0c:db:98:37:41:42:73:de:f7:
f8:d9:ea:0a:f3:ff:fe:77:a0:07:78:92:76:d8:5a:c6:4f:a0:
66:4b:80:e3:2d:18:f9:1c:1f:4b:99:6a:61:98:85:68:6f:7d:
55:ce:70:05:fd:bd:69:cc:23:2a:50:9d:b3:96:8c:bf:64:57:
31:8b:d7:9f:00:49:7a:7c:4c:73:1f:89:ed:2c:99:fe:21:27:
90:14:b7:9b:97:bf:0a:7c:64:bd:10:61:39:4f:c8:54:c2:a2:
13:ed:0d:5e:ea:4a:4c:97:31:3f:df:f5:4e:f5:a1:ac:08:14:
5e:69:81:fc:21:e7:5d:04:36:45:fb:ec:d9:0e:ca:a5:be:33:
bc:26:f9:11:b3:2d:f1:bd:aa:42:68:63:ba:75:da:fb:34:70:
ca:d7:c3:64:76:4b:15:60:d3:92:7f:a6:f6:71:6e:81:ec:f3:
6f:4d:f9:c0:2d:8d:04:e0:c1:6a:7c:65:5d:a3:76:5b:f2:75:
10:60:7c:d3:4b:70:54:d0:a9:76:64:f1:4f:3f:30:9c:87:f2:
15:73:38:9f:f8:17:6f:f3:ff:ed:80:1a:8b:e5:5b:05:51:a4:
93:b3:88:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:42 2025 by rpki-client