Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648/2c5c789c-7d76-3d03-a483-964cb1635ae5.roa
File: 2c5c789c-7d76-3d03-a483-964cb1635ae5.roa (raw, json)
Hash identifier: kMonk9YnP2+97PabxFGliqUFp5WxSA9gUeWK2WNi+qk=
Subject key identifier: AE:2D:BF:D3:65:84:E0:97:FB:87:18:D6:B7:87:C2:BA:C8:B9:89:5B
Certificate issuer: /CN=550f69e7-3015-44b7-8bc9-3c320a530648
Certificate serial: 010D0C9F4328584940395090F7132468EDBEDEC0
Authority key identifier: 45:28:13:3F:C4:1C:23:71:CD:91:62:43:D2:8E:38:EA:B7:84:40:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648/2c5c789c-7d76-3d03-a483-964cb1635ae5.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 8075
IP address blocks: 208.74.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:50:90:f7:13:24:68:ed:be:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550f69e7-3015-44b7-8bc9-3c320a530648
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=f149e0eb-b584-46c2-aa39-ebb19fa23610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:a9:9b:a6:ed:0d:e6:e0:50:64:d8:53:c1:
00:17:fd:dc:12:b5:4b:94:df:a2:ac:89:78:ae:95:
7f:8d:cf:87:c1:39:ea:c6:62:f7:35:af:20:6c:77:
bf:85:0c:7b:31:9a:b1:3a:35:b3:5a:7e:f2:0d:71:
63:92:c6:1c:39:41:15:8e:02:79:eb:bf:61:51:8c:
66:b9:54:5d:b5:6b:21:a3:70:45:f0:d7:92:dd:9e:
68:21:ce:09:3a:9f:b1:fb:87:2c:07:c6:db:84:3c:
f7:91:b6:80:8f:36:d1:18:03:56:2f:8e:d1:bd:1b:
5f:ea:59:d5:44:b5:35:9b:f5:fb:7f:3f:cb:c7:a1:
ad:09:98:d9:39:2b:17:2e:20:6b:5f:36:e0:f4:3a:
72:36:47:68:94:c1:2d:e1:81:b9:ba:2a:63:d7:c9:
ea:4f:c8:41:d8:56:7e:fb:91:12:a4:18:54:c0:60:
14:ea:a3:2b:ea:a0:48:54:49:ea:3d:d4:89:47:a2:
c1:37:0d:6c:19:79:5a:1a:f4:5c:55:ab:f5:04:b9:
84:55:05:20:4d:2f:89:7d:55:68:c3:20:74:7f:55:
e7:46:fb:8e:7b:f3:83:d3:f8:5d:48:b9:8e:24:e9:
6f:d4:d1:6e:96:e8:fc:ff:43:a7:c3:ab:55:1b:00:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2D:BF:D3:65:84:E0:97:FB:87:18:D6:B7:87:C2:BA:C8:B9:89:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648/2c5c789c-7d76-3d03-a483-964cb1635ae5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648/550f69e7-3015-44b7-8bc9-3c320a530648.crl
X509v3 Authority Key Identifier:
keyid:45:28:13:3F:C4:1C:23:71:CD:91:62:43:D2:8E:38:EA:B7:84:40:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648.cer
sbgp-ipAddrBlock: critical
IPv4:
208.74.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:ea:e7:e5:bd:f0:e5:83:d8:8f:7e:cf:c2:99:3c:6a:d2:79:
68:7e:ea:96:2a:cd:35:21:4c:57:24:c2:8e:ba:40:58:8d:c9:
d5:d8:6d:fd:5e:cf:f8:f5:8c:fe:0f:98:2d:d8:64:b3:4c:c4:
3a:a8:6e:5a:bf:8f:d0:a4:1e:de:e0:1b:39:d0:b5:72:cc:75:
c9:f3:52:05:08:9e:89:79:8b:80:ea:1d:69:9c:01:ae:cd:79:
37:9e:ee:3d:d9:99:d7:86:72:37:f5:33:dc:1a:75:f2:01:7f:
6d:48:c4:15:ec:05:e7:bb:0a:cb:32:ca:e0:4c:cf:09:f3:2d:
9d:93:9c:31:3e:42:67:83:08:3a:6f:37:7e:a5:41:aa:68:02:
c3:33:b5:17:5b:8d:ce:17:27:64:de:96:73:8c:50:e0:4e:b2:
aa:7c:52:13:12:9d:e3:8e:8e:f9:4e:e6:08:dc:69:b0:a9:dc:
d3:b2:2c:88:6b:7e:4a:ba:0c:7c:f9:12:26:89:00:44:c6:40:
58:6a:26:f3:c0:7d:e5:66:f8:6a:2b:7a:6d:b0:3d:3d:d6:0b:
d3:38:81:d3:b3:52:31:12:dc:84:89:4d:e4:f5:4e:d6:b4:ef:
ac:34:ea:b2:5d:7b:57:4e:43:4e:e5:c4:32:83:44:84:ba:fb:
f8:92:be:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:24:08 2025 by rpki-client