Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa
File: 3668a37b-a50d-3732-b77d-a313fa326510.roa (raw, json)
Hash identifier: kiMrnb+uHWfr6MkUBkr23dj7mJS+9EfNsBRgYlvzifk=
Subject key identifier: 68:97:20:C1:9E:DF:92:AD:97:34:30:EF:65:90:81:5E:8C:A4:91:4A
Certificate issuer: /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial: 010D0C9F4328584937D93121DE181A888F3FB280
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 208.70.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:31:21:de:18:1a:88:8f:3f:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=44141136-7989-474f-a621-fbfc94b3e5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ad:35:79:0b:ce:15:fe:fd:fe:52:07:31:9b:
c4:df:45:78:46:e4:f5:69:b3:f5:5d:39:aa:6d:ef:
1e:8d:82:20:e8:02:61:2f:09:d2:dd:fb:14:96:a1:
f2:f3:04:93:45:28:bf:ff:f8:9b:ae:a7:83:7c:ac:
f9:79:2c:bf:24:4d:4a:d7:d4:7d:ce:58:64:13:5d:
01:98:b3:07:7b:b0:8e:22:21:33:67:6f:f5:01:9a:
ac:b4:bc:6d:3a:01:3e:b4:c9:82:52:17:64:d2:34:
ef:e4:ab:2d:13:ab:04:80:cb:e8:72:47:46:56:fd:
e6:23:41:08:4f:00:d8:ba:bb:fa:44:d6:85:d7:30:
6d:40:86:73:97:c9:d6:f4:68:78:61:9b:46:1a:f7:
25:b7:f4:d6:b3:5c:0d:6c:7b:ee:5f:e4:e3:88:6b:
20:f6:49:9f:d5:6a:f0:14:86:66:26:5a:16:01:fa:
43:00:8d:32:9f:15:3a:18:4a:4d:ab:c7:24:01:de:
43:2d:d5:57:0b:7f:9d:3a:6f:e1:47:31:ec:78:b5:
40:8e:d1:f3:a6:4b:f2:3d:ca:f6:b1:d1:81:1b:1d:
a6:96:d2:b7:8f:fd:3e:d5:e3:95:62:b3:27:ed:ec:
93:f3:c3:36:ec:d5:97:e5:24:0b:b8:6f:ba:ae:86:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:97:20:C1:9E:DF:92:AD:97:34:30:EF:65:90:81:5E:8C:A4:91:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
X509v3 Authority Key Identifier:
keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:71:80:5a:5f:b3:d0:a8:a9:9d:a2:c0:9f:0b:22:9d:32:b5:
41:ad:70:70:98:27:d7:9b:ad:02:34:a8:fb:b1:8d:52:a0:1e:
06:a9:e9:eb:cc:f4:42:82:b7:88:8f:8a:90:3c:82:c2:11:0a:
72:2c:dc:2c:fa:a2:63:74:44:f0:e7:71:6b:f0:fd:76:05:a6:
a0:db:68:65:76:af:5a:6d:28:36:cb:d0:0b:9a:41:a6:d1:da:
77:c7:dc:62:60:c1:41:01:3a:e1:68:5f:ec:61:47:b9:3e:e9:
16:12:b9:8a:56:c5:8a:25:45:56:27:bd:a7:d7:59:ef:75:6f:
b7:85:73:7a:93:36:87:4f:2c:48:e0:a1:bb:b5:7b:de:63:b8:
41:31:91:59:2c:87:0f:bb:e3:ad:94:ef:d2:4c:6c:a5:fc:81:
2e:fc:23:55:15:49:a1:81:05:c1:8a:3b:b8:c7:19:4c:6d:04:
36:62:17:ff:88:ad:3e:15:4e:a8:48:e0:68:e5:d9:0c:ea:13:
7f:9f:5f:cf:b3:ea:8e:46:4a:75:6e:af:f1:70:d7:a3:4e:9e:
fa:e7:53:ae:c5:70:6a:eb:6f:be:79:17:9e:d4:80:05:ba:fd:
e9:a1:16:b2:b0:33:c4:fe:25:01:3e:03:6a:66:f8:77:7e:4f:
21:a6:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:51 2025 by rpki-client