Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa
File: 02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa (raw, json)
Hash identifier: mWfQh81rtjUClI7KakkhNF3VIiTMterqMPMyxyg5Bhg=
Subject key identifier: 07:51:BC:E9:90:58:5E:4B:51:2C:91:FB:49:6D:DA:53:F3:C9:2B:11
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848ADC6094048DA999F109AE780
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 21723
IP address blocks: 208.181.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:09:40:48:da:99:9f:10:9a:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=3ecc46eb-ca9d-4d22-a3e1-2a6e56df6b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d4:b3:21:c6:3c:40:d4:2a:14:27:f8:28:04:
00:d4:10:8d:91:8b:5c:c2:94:45:1e:28:65:ff:bc:
a4:e0:26:46:8b:e0:0f:6d:cd:cc:5c:62:58:20:9a:
6a:8c:25:ff:6d:c5:3c:11:ab:c1:65:e2:68:41:99:
0d:d7:36:5f:20:a8:61:7b:58:86:e1:41:82:f6:3d:
2b:a6:9f:35:de:89:82:df:e2:5b:a2:65:ce:df:4e:
83:77:af:c6:b7:56:2e:52:1e:95:ad:0a:fa:64:94:
f6:e1:f9:7b:4d:6a:e0:bc:77:95:a2:13:90:4d:96:
d3:2d:3a:f1:e0:5b:ef:4a:58:56:25:ea:02:4f:76:
76:4d:01:9f:a8:23:c8:8a:a7:ee:70:cf:0b:fa:76:
b8:5f:b1:71:a8:d6:4d:ec:6d:16:17:58:bf:1e:c1:
b8:d5:ba:12:99:0b:fa:40:d9:6b:ee:77:af:c3:95:
d2:52:78:0a:e7:19:8a:09:1d:ea:15:6e:7d:86:04:
be:09:6f:5f:1b:1e:fe:2a:71:f1:f4:bf:ce:6b:d1:
f6:00:96:98:49:b0:84:ae:ae:e7:3d:aa:b9:74:f1:
31:3f:11:98:fb:e0:ec:4e:04:59:42:a1:44:c1:af:
28:0d:7b:88:74:8a:dd:83:47:cc:17:6e:f6:3e:f9:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:51:BC:E9:90:58:5E:4B:51:2C:91:FB:49:6D:DA:53:F3:C9:2B:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
208.181.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:70:ef:93:26:8a:95:fd:68:4a:e5:8d:88:c5:8a:52:4c:3d:
e3:fe:69:90:f6:8c:1f:b8:02:e7:da:68:c7:2f:21:3f:43:03:
6d:0f:e7:6e:f1:4c:67:29:c9:c4:29:a5:7f:94:13:06:bc:2b:
85:b7:03:a7:ab:6a:fd:e7:e8:07:5c:b6:d9:7c:7d:78:f0:33:
ce:7c:3e:01:c5:98:e7:72:41:7a:0a:4b:36:37:bb:b9:da:aa:
80:93:3d:f3:4a:ba:58:b6:b1:22:35:02:26:bc:de:4e:f2:c1:
41:d8:c0:d9:aa:fb:24:90:45:0a:08:53:45:7c:9d:de:95:e4:
75:21:66:56:c6:2a:b4:a1:23:9f:2a:b5:04:f5:cc:0d:af:89:
7d:58:da:39:97:78:92:30:66:45:ac:aa:74:de:97:59:c8:78:
d7:bb:a1:34:08:f8:4d:ff:a2:38:4c:77:85:16:c7:08:57:19:
88:4b:9b:61:f4:bc:f2:95:79:3f:63:8d:d6:f0:fc:11:f6:2c:
d5:10:4b:d1:52:c3:11:69:6f:30:4e:bf:a8:ce:be:07:a5:97:
50:a1:df:83:c3:18:79:e5:3d:45:6a:8d:2b:60:7c:b3:7f:c7:
5f:2b:8f:29:fa:6e:c9:e8:77:3e:a4:fd:77:52:f4:69:c0:ee:
92:6f:87:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:08:40 2025 by rpki-client