Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/443e1a2f-4b04-331d-a23f-df6fe81a0c92.roa
File: 443e1a2f-4b04-331d-a23f-df6fe81a0c92.roa (raw, json)
Hash identifier: W//uIU45tS2G0ZJZ3PDFJDjbb8f7hy/kpvHoGM1Ryzs=
Subject key identifier: 5F:8E:18:3D:9F:54:69:18:0C:CA:BB:6A:B2:CE:9B:E1:8C:D9:C1:02
Certificate issuer: /CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
Certificate serial: 010D0C9F43285848DC7A0B44E78ACA2E006E22C0
Authority key identifier: 07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/443e1a2f-4b04-331d-a23f-df6fe81a0c92.roa
Signing time: Wed 12 Feb 2025 19:30:38 +0000
ROA not before: Wed 12 Feb 2025 19:30:38 +0000
ROA not after: Tue 13 May 2025 18:30:38 +0000
asID: 36295
IP address blocks: 162.254.8.0/22 maxlen: 24
192.153.46.0/24 maxlen: 24
192.245.118.0/24 maxlen: 24
208.93.220.0/22 maxlen: 24
209.141.20.0/22 maxlen: 24
209.141.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dc:7a:0b:44:e7:8a:ca:2e:00:6e:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
Validity
Not Before: Feb 12 19:30:38 2025 GMT
Not After : May 13 18:30:38 2025 GMT
Subject: CN=078c5616-1499-45e5-b185-7d3f7f55030c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:a1:c8:b8:06:59:39:ae:64:2e:8e:95:fe:
8f:34:52:e5:87:f2:e5:20:18:dc:67:dd:dd:56:3e:
25:57:af:ce:b0:a8:8c:9d:ff:d8:1d:92:44:f9:90:
e1:5b:41:d3:0c:07:ab:37:65:f8:4b:c1:09:03:a1:
1c:d5:c7:ec:b4:f8:1d:e5:94:f5:d3:33:1e:12:5a:
0e:a3:f4:b8:15:70:8e:8f:a2:6f:87:7f:45:96:3e:
9a:af:df:63:2e:bd:0e:b1:29:28:db:58:ae:19:62:
25:1a:62:46:fe:a7:f1:a4:15:a3:51:bd:ba:d0:8a:
35:73:b2:00:02:c0:81:4f:2e:70:35:10:e1:71:94:
10:1b:b4:fe:3a:16:30:7f:ba:1e:77:22:e4:29:08:
7f:bf:f4:b4:ee:9f:85:92:e2:76:d3:e1:0d:df:b6:
96:00:94:68:a1:de:f4:87:a3:6b:16:9a:f2:04:f5:
3f:35:06:0f:b8:81:a8:39:df:86:68:f8:64:26:11:
46:81:44:c1:c3:d7:dc:8a:c4:22:b0:3a:61:a7:c2:
b7:8e:51:74:ed:fe:f5:9c:be:05:49:15:22:e3:1e:
99:3e:1e:09:84:eb:59:53:89:eb:be:27:d3:20:a5:
cd:dc:06:96:36:60:c9:20:97:80:f6:b3:ea:ab:6d:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8E:18:3D:9F:54:69:18:0C:CA:BB:6A:B2:CE:9B:E1:8C:D9:C1:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/443e1a2f-4b04-331d-a23f-df6fe81a0c92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.crl
X509v3 Authority Key Identifier:
keyid:07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
sbgp-ipAddrBlock: critical
IPv4:
162.254.8.0/22
192.153.46.0/24
192.245.118.0/24
208.93.220.0/22
209.141.20.0-209.141.31.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:a2:0f:a9:44:90:45:2c:f6:8c:ab:c6:9b:ae:1d:d4:68:80:
9d:4c:6c:3d:f1:39:94:2f:96:71:b8:c4:8a:2b:82:db:4e:a2:
4f:0e:4b:22:ef:24:7d:aa:8a:16:94:f7:05:a1:f0:c6:27:98:
19:ef:dc:36:59:95:1a:95:7b:86:bc:6c:c4:99:2f:23:9f:99:
0e:ec:d4:87:90:d0:cf:5a:4d:77:b6:f1:76:0a:12:87:84:da:
73:b8:2f:61:af:5a:c4:b2:6f:66:2c:cb:b5:6b:76:b2:f2:ae:
11:e1:8f:0c:14:61:ac:b1:af:50:03:fc:0c:b2:38:c4:a3:b7:
50:d4:bc:9d:46:7e:d6:73:1c:96:85:3c:58:ae:a8:c6:72:0c:
ca:b9:92:e8:46:73:d7:41:59:49:a6:3c:3b:a5:02:83:aa:8c:
5b:6d:7c:ae:53:20:85:e2:e0:81:42:8a:37:62:e1:92:ad:4a:
97:5b:84:78:82:c8:b5:bf:3d:c9:a2:a0:37:00:aa:fb:a1:36:
d7:b1:0a:46:e3:af:5f:98:72:5e:98:51:66:97:fe:3c:95:b8:
a0:ee:36:09:ee:eb:19:76:5a:a0:27:70:91:42:70:bd:bd:49:
17:5c:bd:8a:8e:82:78:ff:19:db:5b:38:b0:d5:78:26:a6:eb:
ee:13:79:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:00:50 2025 by rpki-client