Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa
File: fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa (raw, json)
Hash identifier: 8PO5d4Cf4w4H1oxeZz7Z5r0P8bcTtySeaUI8Khc5yIs=
Subject key identifier: 5E:7A:53:C1:92:F2:F2:9E:34:10:D0:E5:C0:4E:77:49:F6:69:97:90
Certificate issuer: /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Certificate serial: 010D0C9F43285848FD56C01E445451F915D86DC0
Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 16941
IP address blocks: 208.70.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:c0:1e:44:54:51:f9:15:d8:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=243cd66d-be79-4ef6-b48b-05c01a759129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:d2:d6:94:22:38:1d:3f:52:78:6c:93:61:
7c:aa:1d:e8:0a:88:7c:fd:cd:5b:c6:7f:f2:e0:44:
e2:f4:bf:4b:3d:b1:b6:c8:7d:ce:52:73:f6:ad:ff:
37:be:23:60:5d:23:b2:d6:06:aa:83:94:c5:58:4d:
0f:90:5b:00:e8:6d:32:aa:d4:d5:20:20:09:c8:5c:
b0:50:52:73:d9:f1:77:22:20:11:44:1b:93:9f:87:
15:56:e9:e1:15:3b:7a:d5:66:e8:98:e8:02:f1:78:
80:50:da:04:81:56:d9:f6:69:c6:4f:ce:b5:b7:1c:
e1:18:fc:4c:32:35:8b:7d:bc:e5:c8:10:4e:a8:ba:
eb:d2:55:ab:3b:78:78:fc:69:c1:c0:9e:eb:95:4b:
ec:f3:09:85:e6:8a:09:a8:d3:e2:f7:5a:da:ea:d5:
7a:12:eb:fd:ea:4e:5b:b8:27:44:0c:3b:0e:f7:df:
eb:5e:f8:40:63:61:57:c2:74:c7:19:37:c2:93:ed:
29:de:88:48:f7:0d:06:c0:ea:43:56:e7:ed:7b:28:
bf:79:84:39:a0:c0:33:0d:44:ef:8c:eb:af:9a:32:
ad:81:43:f1:8d:74:d1:32:4d:53:91:e6:5f:e2:f8:
ff:4e:19:8d:48:3c:e0:02:3f:dd:47:6b:18:30:c8:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7A:53:C1:92:F2:F2:9E:34:10:D0:E5:C0:4E:77:49:F6:69:97:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl
X509v3 Authority Key Identifier:
keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:5c:16:2b:2c:0e:06:cd:e0:5c:21:a5:6d:34:05:8f:57:a0:
f6:15:e3:a9:28:87:85:df:9c:bc:5d:81:fc:66:ab:0c:12:fc:
ff:b2:14:bb:9a:c8:71:78:f3:95:93:e3:0d:de:31:d3:9c:01:
69:7b:8b:14:c9:28:b9:b1:8c:fa:53:cb:85:22:d6:62:0d:51:
5c:9f:86:01:b1:ac:f9:e5:f1:ce:30:9b:d8:67:c9:25:4a:6f:
be:88:bd:70:ec:f6:12:5b:7b:6a:0e:b7:9d:fd:26:4a:6c:d8:
a3:80:54:c5:1d:b5:8a:3e:3e:15:fc:e7:19:51:61:0b:94:95:
20:b2:9b:68:3f:fb:3d:de:65:27:0e:d9:cc:1f:de:81:1d:ee:
08:4c:d7:32:f6:75:9b:eb:0e:cd:2b:4d:92:ce:18:26:7f:d7:
8d:5a:52:d7:70:cc:20:0f:ca:69:73:2b:e4:0a:1c:4e:cf:06:
9d:2a:84:63:08:db:d7:87:ac:65:e2:d4:cb:97:a3:f8:12:81:
9c:7b:bb:0b:e1:a7:de:aa:9f:78:44:a1:14:dd:6f:a5:68:ec:
0f:18:61:e1:cf:53:83:ff:b5:7b:3e:de:db:40:4f:66:c1:6f:
ec:35:4d:02:02:10:64:34:27:a3:d5:75:fa:9a:43:e2:f3:e5:
0b:47:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:53:03 2025 by rpki-client