Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa
File: 42c8111b-72eb-368e-a605-4f13d00564aa.roa (raw, json)
Hash identifier: yJnXtliuKZup3940WbUmNdbj+gTF7VOdH4uSWVTYsgI=
Subject key identifier: 50:5F:08:15:33:32:A9:6C:87:73:C8:1E:6C:11:46:78:AF:F1:BE:4C
Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial: 010D0C9F43285848F4F693F6C9C114E7AFE92180
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 14618
IP address blocks: 208.95.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:93:f6:c9:c1:14:e7:af:e9:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=6bd0d450-1786-4b8f-b49a-c5841eda1711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c7:ff:3d:cb:64:3b:6d:2d:75:46:47:5a:1f:
e2:64:81:b5:da:5e:01:9a:f8:74:0e:0a:18:54:48:
a8:a5:97:a7:a5:a4:86:e2:d4:8b:f3:71:b3:64:26:
10:cc:7d:9f:da:b9:c5:ae:4c:f9:7c:7a:d6:0b:75:
64:f3:cf:91:d2:39:bc:c9:89:c5:81:4d:5d:4b:ee:
9b:1f:41:05:85:37:0d:85:ca:0d:6e:20:42:71:0f:
d0:3d:ab:2d:ba:96:0b:46:e8:7f:7b:2e:0a:7f:df:
67:33:83:cc:b8:15:60:29:cc:ad:5a:2b:ac:0f:85:
0e:88:89:f0:30:f7:e3:bc:b9:b0:01:b2:6d:aa:9d:
fa:17:0c:78:84:bf:19:53:b9:5e:07:8a:6d:fa:07:
0c:4f:8f:c5:e5:ea:ee:45:2d:7b:9d:cb:df:1c:b1:
f5:6e:ea:51:02:9a:77:5a:2b:ed:d9:a8:80:c4:d2:
fa:65:ef:3f:43:b8:e6:bd:50:e1:e2:e9:99:d6:2f:
e2:80:fc:a9:e8:7e:e9:f9:af:07:e6:e5:f2:a9:6e:
ef:44:1e:15:b1:10:c8:a8:49:5a:cb:9a:09:86:6a:
5c:f3:80:b5:78:6b:cc:65:80:2f:ed:25:cf:7d:57:
fd:1d:8b:7f:fa:8a:f1:a8:30:24:69:ad:88:3e:5c:
0c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5F:08:15:33:32:A9:6C:87:73:C8:1E:6C:11:46:78:AF:F1:BE:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
X509v3 Authority Key Identifier:
keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.95.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:00:91:2a:11:22:74:4d:5b:3e:ac:c5:40:3e:02:d1:c0:37:
33:11:59:37:85:d9:26:60:50:1f:04:83:85:4d:b1:93:e6:9e:
05:3b:00:2a:f6:43:3d:ec:13:17:32:90:c8:8f:89:ca:7e:ed:
3b:05:d2:7c:99:4f:b8:db:4a:6f:03:ec:c0:2c:7b:ed:dc:c0:
b9:30:ac:01:f0:cd:6a:9c:67:45:e1:35:9a:a8:42:c4:ba:8b:
a2:b7:bd:df:d3:bb:b7:51:4b:69:d4:cf:62:f4:98:8f:5c:00:
3b:c5:85:bb:c8:8f:07:68:6d:3e:7f:7b:af:de:7c:af:e7:33:
99:66:da:ab:ed:cb:60:63:b1:2f:e6:78:4c:93:60:52:02:d3:
ca:82:2f:58:c1:63:33:10:8c:20:fe:f2:25:49:ca:de:31:94:
10:d5:95:11:a4:f4:f5:47:43:02:9a:7d:6d:be:2c:9b:67:7f:
22:17:37:b0:80:02:f1:cf:dd:4f:50:9d:f0:10:f6:2d:a5:14:
3c:cd:88:c4:df:93:f3:8f:1f:c3:a3:ec:66:6a:67:5d:4d:ad:
c8:12:8f:5a:88:2f:8a:a6:05:0a:3a:a3:c3:92:95:c9:c2:d0:
85:a9:ac:34:e8:a4:f5:4a:0c:6b:2c:d1:ef:2c:20:ad:ea:77:
77:73:9d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:19 2025 by rpki-client