Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/c152772a-1f9b-3f1b-9084-66c9415bc849.roa
File: c152772a-1f9b-3f1b-9084-66c9415bc849.roa (raw, json)
Hash identifier: h0erk/zq5Cbd3wFeSRGWHrNzU0en61UODpV2IIOfzeM=
Subject key identifier: F5:EA:53:23:97:CC:58:E6:73:B2:BA:EC:7C:8A:36:BD:B0:5F:B1:4E
Certificate issuer: /CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
Certificate serial: 010D0C9F4328584957F3FD8EEF84A55B762B0B80
Authority key identifier: 9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/c152772a-1f9b-3f1b-9084-66c9415bc849.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 46253
IP address blocks: 208.94.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f3:fd:8e:ef:84:a5:5b:76:2b:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=1bbb511d-dd4b-4f10-8395-20124d701e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:73:a4:5b:9b:d1:f6:55:35:d2:e3:f5:19:
68:ad:d7:36:5c:75:c3:72:5d:ef:49:0e:4c:48:cd:
3c:42:fb:1a:a3:21:2f:d2:07:eb:fb:df:ca:b4:31:
69:2e:83:22:2e:c3:21:10:05:2b:4f:3f:f5:f0:d1:
f9:29:30:6b:e7:8a:31:0d:17:27:29:4c:07:ed:d3:
3d:cf:cf:c5:8b:12:43:0c:5d:2e:4b:93:29:74:64:
cc:a1:2c:2a:78:d5:3f:e8:3a:97:ba:6c:b3:a2:3c:
5b:ba:d5:52:ea:e5:4f:a1:bb:10:bf:1e:1c:12:49:
6a:22:1b:5f:74:82:a8:4e:0f:44:65:d9:ef:68:8d:
7b:47:02:91:38:d1:60:5a:a5:b4:13:57:72:85:28:
bb:39:98:2e:d6:79:2f:7c:de:4f:60:58:4d:d7:9b:
c1:b5:a1:23:9d:0f:73:ef:fa:b9:50:bf:4c:c3:28:
c7:ce:11:d4:5b:6c:05:e4:2d:e5:2e:22:07:8b:38:
08:d5:3d:a1:6a:e6:57:ee:d7:95:02:90:38:83:14:
92:6b:61:2f:db:01:58:76:4b:de:98:90:11:e4:a1:
1e:76:3e:02:52:92:45:78:88:d5:0f:13:a1:9e:b2:
01:a5:fe:5e:90:2e:7c:fd:31:39:7c:67:57:1f:7c:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EA:53:23:97:CC:58:E6:73:B2:BA:EC:7C:8A:36:BD:B0:5F:B1:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/c152772a-1f9b-3f1b-9084-66c9415bc849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.crl
X509v3 Authority Key Identifier:
keyid:9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:e1:cd:a1:b1:9a:82:6f:de:a0:40:07:31:6f:f3:6c:e2:0f:
f5:18:58:54:3c:b0:0b:ea:d0:2f:80:f4:ab:41:c8:e8:e9:e8:
ab:ca:7b:c1:f0:e4:d0:27:32:0c:35:65:f6:80:e1:b2:5f:f2:
29:09:ad:bf:a8:76:4a:eb:ee:b1:70:42:58:e8:d8:6f:47:dc:
bf:da:d9:1a:65:81:6a:3b:73:d6:17:e2:e4:8b:ee:14:77:c1:
4d:3a:b9:19:41:6b:f9:f5:0a:9f:c0:8b:ad:ed:74:d4:21:5c:
d6:86:bf:93:0f:4b:81:08:16:03:e4:63:c5:a9:a9:cb:15:a3:
e7:2a:31:43:65:66:bc:02:e6:5c:da:a4:bb:6f:df:45:8f:ec:
45:e9:12:90:3c:e4:a5:74:f7:58:12:ab:65:ed:6d:14:68:10:
43:5f:37:49:f6:46:30:c8:60:66:e4:de:e9:b0:f7:75:01:dd:
a0:d9:18:5d:c2:94:24:24:88:4c:be:c9:0c:dd:5e:ae:5c:df:
a3:c9:5d:2e:62:38:02:77:5e:2e:92:3f:37:67:bf:5a:b3:71:
c0:dd:c4:e7:65:00:5b:6c:de:cd:64:e1:59:5b:11:3c:c9:ce:
78:1b:33:98:da:2b:39:de:98:b1:13:75:f2:8c:85:d7:ac:bb:
07:25:6c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:22 2025 by rpki-client