Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b71b0d60-2287-334e-a837-88ad23ac4104.roa
File: b71b0d60-2287-334e-a837-88ad23ac4104.roa (raw, json)
Hash identifier: eNQ19pDiNR0mlwFADDAXbzYBuxaGlQYwkP7TMi8z48g=
Subject key identifier: 5E:A8:CC:C1:E9:E0:B8:5C:71:B9:7A:38:AB:9D:25:C2:29:61:73:0D
Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial: 010D0C9F43285849446949F7DF3645B872D5E380
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b71b0d60-2287-334e-a837-88ad23ac4104.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 7029
IP address blocks: 208.123.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:49:f7:df:36:45:b8:72:d5:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=f681ccd8-419e-445f-bc3f-95299ab20381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:fb:0e:e2:32:15:ee:78:c1:13:53:72:f5:
fd:aa:d1:6d:c0:45:a7:94:66:3f:08:2f:fc:dd:22:
12:1d:88:31:cd:7d:de:90:49:02:cf:b4:e6:82:9c:
de:c3:b1:e4:68:51:15:be:80:07:08:1f:e9:9a:10:
10:5a:67:4b:b1:3a:82:98:75:be:57:9b:c1:3a:08:
29:a0:b9:8f:29:dc:6c:e3:b0:a0:3a:5d:a9:34:be:
e3:52:24:6b:c0:25:51:b4:f8:5d:46:60:77:47:6d:
e4:3a:87:cc:c2:48:aa:95:28:86:29:c9:24:76:1d:
a7:18:5d:f5:08:4c:09:d8:71:58:3b:60:48:3b:bf:
e2:7d:63:07:84:4b:e6:42:43:55:72:0d:0a:06:e4:
b9:75:7e:94:00:af:c1:bf:e4:5c:33:39:92:23:6b:
2f:3b:7f:c5:7a:f3:b4:29:d3:3f:2b:fb:79:f8:38:
9b:da:20:93:3d:61:5f:3e:61:9a:b6:1f:f1:56:a0:
9a:07:51:2e:53:30:8d:30:8c:08:f7:e4:f3:9f:af:
80:50:25:17:7b:b9:0e:41:d8:ac:f3:b0:8c:a1:4c:
4b:d0:36:35:5c:8a:1b:bb:30:26:2b:5d:9b:b1:04:
99:59:30:ba:00:23:8d:de:0c:42:71:f7:15:44:ed:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:CC:C1:E9:E0:B8:5C:71:B9:7A:38:AB:9D:25:C2:29:61:73:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b71b0d60-2287-334e-a837-88ad23ac4104.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
X509v3 Authority Key Identifier:
keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
208.123.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ad:23:09:57:9f:59:ff:92:eb:90:5e:8b:1d:6d:4f:1d:d0:
27:76:87:3b:34:6e:a6:12:27:94:8e:c8:4b:c8:ec:09:89:10:
0d:0c:d7:72:0d:82:a6:b4:fe:6b:85:5a:0c:90:40:28:b9:7a:
22:db:8c:b9:b1:a4:12:70:ef:4b:8b:bf:12:a5:9c:bb:c5:dd:
00:ce:f8:3b:58:be:03:d3:5b:fd:b2:6e:71:14:be:d7:c3:db:
d5:f2:57:a7:f0:06:d0:b3:a2:31:0a:06:05:9b:5f:2c:27:f5:
94:12:9f:df:c8:fe:e0:d0:b3:30:5a:a0:4b:50:bf:eb:8f:9f:
8d:52:64:25:50:e6:c1:f2:bf:e2:93:5f:30:36:60:5a:8b:12:
c1:20:d7:78:b4:52:2b:15:8b:17:98:5a:35:ea:b8:35:56:23:
9e:af:93:b6:3e:9c:f3:fc:d2:ab:0d:da:a3:23:d4:1a:18:92:
2c:c2:d8:d9:9b:78:55:77:c1:ec:3c:8c:4a:bd:c9:8c:fd:1a:
05:4c:1c:36:d9:f3:1a:ae:c9:ba:97:74:53:1d:09:a0:6a:2e:
f9:a2:34:f2:a5:22:b2:95:fa:e6:5f:3e:98:13:cb:79:be:f4:
c6:9f:14:f3:c1:f6:c4:19:7e:db:a6:39:bd:b3:e4:9e:b3:83:
5c:22:f4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:24 2025 by rpki-client