Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa
File: b4e78078-a443-3edc-9dba-d33315b67c0b.roa (raw, json)
Hash identifier: bSqgf3KO5XEOr7pdXoIjEfqV5+3VKmHd48YTFg/HZJA=
Subject key identifier: 4D:18:04:81:90:DE:08:93:A2:1D:75:AF:82:DF:74:2C:8A:DA:CC:84
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F43285849350E87BBAE11FB132F8BC480
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 33208
IP address blocks: 170.133.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:87:bb:ae:11:fb:13:2f:8b:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=4dc61280-6970-41dc-ad47-a417ec81b21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:c6:55:fe:f2:28:76:35:8a:83:7e:10:4a:
20:54:e7:0b:e5:34:80:a1:d4:df:58:0f:86:8f:12:
f9:5b:05:eb:9b:fb:91:0c:98:ca:f5:87:2c:4f:c5:
04:8e:9d:f0:ed:e9:74:1e:70:e5:91:2f:9a:4b:65:
ca:77:3f:44:d8:54:f1:56:db:6e:e1:f7:fa:92:40:
10:70:2c:2f:12:8d:8a:7e:20:fd:9a:92:f0:d5:75:
ea:cc:31:c8:4a:34:8f:1a:06:bf:74:80:22:2f:13:
bb:6d:3e:dd:b0:2a:34:94:61:9f:92:12:04:97:8d:
25:6f:47:42:d1:a9:bf:ec:85:2d:82:7d:ea:d2:fb:
14:86:81:a2:16:f8:f8:57:50:0b:c4:f6:ed:86:58:
f4:10:70:d8:7b:5d:2c:91:c5:71:09:fa:8a:4e:68:
e0:30:c0:fe:96:58:0a:5f:d4:2e:c7:8e:31:41:a6:
ef:d6:cb:82:b2:58:c4:9e:c8:74:23:ae:55:b4:b9:
27:4c:29:6d:b0:73:92:ed:26:a6:a9:d3:bb:a4:15:
69:25:59:e6:bd:71:14:31:c5:c2:30:13:de:ef:b1:
33:5b:7f:79:31:f0:80:de:7f:12:ed:00:c7:7e:2e:
48:53:68:2c:13:7a:01:da:b0:3a:4d:88:0c:55:d6:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:18:04:81:90:DE:08:93:A2:1D:75:AF:82:DF:74:2C:8A:DA:CC:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
170.133.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:8f:7b:65:08:a5:ba:8a:36:f9:9d:2a:55:ee:db:00:4d:49:
44:0c:06:9e:a6:5a:d4:9b:46:c7:b3:d6:ea:f2:dc:b2:8a:a3:
30:00:7b:c9:1b:1c:8d:77:78:ea:b8:f1:3b:c1:fa:66:20:ff:
a3:37:a9:d3:24:14:25:c4:39:db:fb:72:1e:92:5c:9f:33:dd:
dd:c9:05:bc:ec:c7:7d:60:c1:1c:a7:c0:57:17:88:d5:0b:75:
b6:be:9c:6b:f3:a2:4d:ec:29:e1:5c:82:83:a5:a4:c3:5d:5c:
7e:f1:94:e8:29:22:00:84:0b:4d:37:ca:e0:6a:52:a9:d5:53:
f3:e9:bc:84:ff:0f:c9:2d:a2:89:33:24:51:65:cb:95:08:c6:
2e:be:28:6b:eb:66:a9:4c:f4:51:6e:df:38:22:df:1b:26:40:
27:2e:47:59:ca:8c:67:d1:f9:2c:60:07:e5:48:4e:c8:a4:77:
48:dc:33:fd:96:7d:aa:29:b1:43:0e:a3:ab:d6:34:86:b3:13:
77:38:d7:69:e5:bc:d1:b8:c6:1e:ea:57:e3:c1:23:45:90:ae:
4f:6d:90:45:13:ce:72:c2:eb:fd:04:67:20:9f:28:a3:4b:e7:
98:52:b0:2c:07:0e:ac:23:b6:9c:3a:fe:8c:2e:a3:60:6c:9e:
b0:00:df:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:41 2025 by rpki-client