Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e383e3e-0344-3c61-8718-33b9fa1deed1.roa
File: 2e383e3e-0344-3c61-8718-33b9fa1deed1.roa (raw, json)
Hash identifier: mbqaBoHX7ShhpKiZF0xE5sN/rNy0tpV5L/I2ljr7gXI=
Subject key identifier: C9:D9:86:45:EC:60:E5:3E:86:4F:BC:D0:6C:F3:A0:1D:FB:64:4B:0E
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584950F9666DEC2F73E5FEDFFF40
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e383e3e-0344-3c61-8718-33b9fa1deed1.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 11290
IP address blocks: 208.118.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:66:6d:ec:2f:73:e5:fe:df:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=22ed5abc-7bc6-4a44-80ba-7cbf7d6d38db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ba:f4:0c:c0:59:be:fb:90:b2:3e:fa:84:2d:
47:35:54:e2:0e:5d:2e:6f:59:a7:a9:22:f1:a0:bf:
d9:55:cf:22:d5:cc:8d:d9:63:85:a0:a6:83:b3:01:
52:af:47:07:df:ea:4b:b9:68:01:d9:b5:a7:56:46:
cf:a2:fc:90:77:4a:23:e5:50:8e:af:18:bb:b4:db:
65:27:a8:aa:56:07:85:62:23:c7:47:79:ac:e1:d4:
df:34:ba:b1:82:33:4c:d6:c7:bc:c0:4f:0a:47:ba:
e6:af:d2:ed:fa:3e:ab:d0:9e:09:01:e3:9b:73:c8:
2c:63:29:c6:ee:30:b5:c8:75:92:3e:e3:e5:74:f5:
d4:73:76:2d:80:f9:a5:a1:69:8f:40:ad:fd:d6:0e:
d3:29:bf:c2:8a:38:9e:ac:10:fb:33:4c:d1:cf:c8:
d8:18:a2:07:fe:5b:41:de:61:08:72:ac:62:5b:c8:
b7:76:fc:61:69:4d:67:ed:1f:29:df:2c:b1:95:21:
87:0b:59:a5:73:cb:da:bd:fb:89:cc:d1:79:27:58:
eb:81:6f:b6:0e:09:ed:34:5a:5e:51:85:47:e7:db:
c9:ea:ca:fe:14:33:34:a2:c9:af:1c:7d:82:cd:4b:
80:db:2b:49:81:93:91:9b:3f:c1:28:07:6d:b2:fd:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D9:86:45:EC:60:E5:3E:86:4F:BC:D0:6C:F3:A0:1D:FB:64:4B:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e383e3e-0344-3c61-8718-33b9fa1deed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.118.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:d7:a5:b4:7a:5c:b5:f1:56:f9:7a:5e:a8:a2:cd:82:cd:3d:
65:c2:6b:e0:14:3d:e0:0a:d6:88:02:d1:b2:b9:e7:4d:ca:e8:
43:d2:0a:63:d4:58:9f:54:e8:26:cc:1d:46:4a:0b:ed:79:53:
77:28:eb:b4:0b:42:9a:e3:b5:8a:77:84:6b:e5:0f:02:7f:13:
9a:41:f7:d8:c4:91:ec:81:5b:c5:d8:6d:ac:c7:c4:5f:1d:a4:
f2:c8:83:4e:65:6b:e9:be:66:08:28:b4:1a:d8:f9:e9:46:63:
14:1f:bc:e0:3a:48:f0:b9:a8:1c:3d:66:04:09:53:37:3f:b3:
bf:ff:1e:4a:4f:a2:ba:cc:0d:15:42:f5:2e:0d:f3:41:ca:26:
c3:23:6e:dd:3b:72:1f:eb:e4:83:8e:6b:e3:53:34:e7:85:23:
28:1c:23:18:d1:20:08:f2:26:fb:18:8b:3b:3d:9b:fa:86:3b:
af:8c:bb:18:9c:34:81:ef:19:3f:d5:1a:da:3e:61:4e:6c:79:
ef:4c:30:e5:00:c0:2a:64:04:f5:56:f4:5a:34:42:f1:33:30:
4e:ac:fd:5c:de:3a:0f:db:ce:d9:47:7c:3a:b7:bd:5d:ee:e6:
7a:66:12:fc:64:16:14:9c:94:b3:ed:89:d1:35:3b:36:56:e4:
19:4e:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:29 2025 by rpki-client