Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/2f62a62b-7687-3ea5-a88c-3d8398914ec7.roa
File: 2f62a62b-7687-3ea5-a88c-3d8398914ec7.roa (raw, json)
Hash identifier: Hik0ZuHtXlWL6UsevvPT4U//JoLinX3o0ns77+1zfOA=
Subject key identifier: CE:5F:C4:0E:C7:41:0B:1D:33:70:84:F5:14:D6:E9:45:EE:8E:7F:FE
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F43285848828086F72708AB4478FD2380
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/2f62a62b-7687-3ea5-a88c-3d8398914ec7.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 29968
IP address blocks: 208.20.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:86:f7:27:08:ab:44:78:fd:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=f2223676-b3b1-4d0e-95c8-af88e3d69980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:1a:66:09:1d:ae:af:31:52:0e:71:46:d1:
f6:1e:cc:f5:25:68:1e:60:97:15:a2:42:74:af:4c:
71:a5:33:3f:23:31:44:bd:09:73:bc:89:52:bc:b6:
19:5a:df:b7:f3:21:2d:52:1b:c5:7f:7c:00:f3:ef:
14:86:69:2b:ef:c1:e1:b5:ce:5e:26:f2:e5:1c:4b:
1a:6b:3b:8b:d6:23:21:43:98:2c:6b:2f:8f:c1:80:
2b:a2:9b:07:35:48:8c:29:6e:92:13:3b:10:48:04:
ae:7c:2d:fd:42:81:c0:72:42:ba:ca:57:58:55:af:
c4:91:1c:af:da:e7:a1:36:bf:10:19:9a:dd:33:3e:
b5:b9:b3:0f:ed:40:64:eb:0b:b5:83:d2:81:c0:20:
35:a3:cd:84:e5:8b:e7:49:8b:7b:d6:d9:a9:b3:50:
51:eb:96:ac:00:fb:e5:f8:23:ae:0a:31:00:ba:c1:
a2:05:c6:35:ad:e2:3a:27:a3:08:a6:1f:42:31:f8:
30:3e:ef:1d:4e:83:24:ee:c5:80:1d:9c:db:f8:05:
6f:da:40:4c:ed:dc:4a:c8:6d:8e:cc:22:b9:e8:7c:
e3:44:db:b8:e3:78:3b:7c:d2:08:79:3d:b5:8f:19:
65:8f:8f:f9:4d:7f:3d:b4:1f:8a:cb:c9:8d:59:f0:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5F:C4:0E:C7:41:0B:1D:33:70:84:F5:14:D6:E9:45:EE:8E:7F:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/2f62a62b-7687-3ea5-a88c-3d8398914ec7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.20.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:76:bd:2e:7b:22:56:cf:08:ac:5b:7f:82:13:33:f7:63:18:
8e:dd:5a:a1:14:de:8a:76:cb:88:6f:b2:41:b3:29:07:19:a1:
eb:29:ce:7c:cd:29:f7:9a:ce:c9:72:18:de:ce:fc:f4:f7:c0:
64:54:3c:fa:d6:b0:7f:dc:7a:bf:34:07:2f:8e:ae:07:6b:b9:
49:8c:d5:e1:2a:a2:56:5f:fd:0c:f4:31:35:9c:33:4f:ed:b0:
92:f1:64:14:46:1f:08:ec:94:37:1b:11:64:a1:ca:f6:6e:f9:
a6:8a:f2:52:db:53:ef:8a:52:d0:48:6a:ee:24:20:a6:5a:26:
d8:1e:8c:54:42:4a:ad:c0:5c:95:d1:ae:5b:4a:17:29:64:c1:
08:ef:9f:55:72:fe:66:e5:66:62:a2:04:ac:2e:d4:97:68:e5:
de:76:ed:8a:fa:19:9d:b6:01:0c:db:59:0e:dd:29:0b:19:61:
84:84:ce:08:fc:c5:0a:e8:d6:e6:47:50:16:e7:f4:69:8a:bd:
1b:43:16:4e:23:b8:07:0c:88:45:3d:69:8e:53:fe:10:85:74:
df:7e:39:53:ff:44:e5:5b:a0:c7:93:e5:c5:49:27:03:6a:6d:
d1:c3:47:60:0b:66:40:b7:c2:79:d4:c8:7d:19:84:de:ba:ff:
4d:88:dc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:52 2025 by rpki-client