Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/ba13bec1-c34c-3863-b274-69146af12c2e.roa
File: ba13bec1-c34c-3863-b274-69146af12c2e.roa (raw, json)
Hash identifier: TCk75Ti6NRlc2GEOOy5uECFblpzx3VB+IY5hSBJRy9o=
Subject key identifier: 4A:56:EC:F9:87:9D:73:F8:C3:71:A6:C8:7C:4A:C0:73:1C:B4:77:D0
Certificate issuer: /CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
Certificate serial: 010D0C9F4328584908817A7CFEBD09B047C4DA40
Authority key identifier: 79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/ba13bec1-c34c-3863-b274-69146af12c2e.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 208.66.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:7a:7c:fe:bd:09:b0:47:c4:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=4e2abf47-9842-462e-96e7-ffa70d98e5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:3a:1c:35:1c:86:3a:73:bd:6a:f7:7d:ff:
b9:3a:50:59:28:62:f1:5e:84:cb:21:00:43:60:7b:
9a:fd:a6:61:c1:70:66:2d:53:5f:bb:ec:65:73:25:
9d:d7:5e:dc:9e:4e:f3:34:39:78:0b:72:4a:38:4d:
23:7b:4d:9b:70:e1:6b:b1:30:b7:cf:ed:59:e9:75:
0f:38:64:1f:ff:d8:bd:c0:b0:42:16:1c:95:8d:63:
31:3c:2a:fb:29:8a:0a:0e:1d:91:c5:26:76:c4:d1:
d1:1d:6b:5a:55:fd:24:d9:6b:86:33:e7:c8:b7:cd:
42:d6:c7:7a:a9:6a:4b:ec:a7:3d:d8:cb:fa:d3:8a:
fd:e2:1e:95:8f:7c:f4:16:08:44:3a:f0:7e:9b:b6:
0c:cd:08:61:f0:fe:37:ae:1f:61:a4:c8:b3:5d:73:
4a:3d:15:1c:67:26:b3:13:5d:78:74:20:2e:b8:11:
3a:9d:bd:fa:09:5a:02:24:b4:9d:f8:82:30:60:c5:
ab:f4:03:2e:2b:b8:d1:d6:a7:b0:1d:cb:28:22:f7:
f4:0f:f8:de:55:7f:26:cf:36:78:5e:72:f2:ca:c0:
0b:14:25:17:54:b7:ab:9e:4b:a4:d4:35:81:00:20:
1f:45:44:6f:44:2e:2a:90:6e:3b:21:28:32:3b:f0:
2c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:56:EC:F9:87:9D:73:F8:C3:71:A6:C8:7C:4A:C0:73:1C:B4:77:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/ba13bec1-c34c-3863-b274-69146af12c2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl
X509v3 Authority Key Identifier:
keyid:79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
sbgp-ipAddrBlock: critical
IPv4:
208.66.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:07:46:2e:6a:d4:d9:ed:97:59:bb:f3:b2:94:1d:87:88:11:
85:e9:fc:d4:33:da:ab:1c:9e:24:16:b2:15:16:8e:0a:19:04:
d4:56:ae:dc:db:53:8e:c6:41:36:d4:d6:55:f3:ae:4d:20:5b:
bd:74:1a:72:d7:ef:7c:d8:3a:8d:f4:3e:29:ce:9a:89:82:9f:
be:24:81:4c:09:f3:53:8f:38:82:89:2f:1d:84:29:bf:2e:5a:
ff:c4:bc:df:83:63:56:90:23:42:e8:c3:6a:5d:30:4b:cd:33:
92:f8:86:35:ee:bd:a0:7b:a0:67:39:0d:51:1c:5c:ef:f1:4b:
08:9a:8a:9b:c6:5b:5f:81:ef:f9:c3:15:cc:34:68:eb:12:62:
39:c7:8c:8f:81:53:ab:a3:6a:f1:5e:75:f9:ea:59:31:45:ab:
e4:47:9d:42:03:c2:7f:b3:fd:2a:c2:0c:b1:41:87:0a:cc:27:
3a:37:59:e1:26:38:aa:d0:59:37:da:0c:e5:ea:b9:31:fb:f3:
45:71:54:6d:64:aa:c0:08:cb:04:0b:08:67:93:31:34:f8:bf:
16:ef:61:cc:2a:aa:4e:af:b8:39:48:bd:71:08:84:6f:7e:33:
2e:68:c8:62:0f:f1:63:11:22:8d:13:de:a0:9a:c6:5f:8e:d5:
83:77:85:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:26 2025 by rpki-client