Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa
File: 88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa (raw, json)
Hash identifier: ps+F2DdIhHccHdTZDnr4PL35nLuBYhtGwpu/i+xWL1I=
Subject key identifier: EB:2B:BB:9A:15:27:4A:E6:26:DF:62:21:91:F4:06:E0:9C:56:63:85
Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
Certificate serial: 010D0C9F43285848F4F69717FB02A15C8FA7CCE0
Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 17017
IP address blocks: 168.245.136.0/24 maxlen: 24
208.70.144.0/21 maxlen: 21
2604:7fc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:97:17:fb:02:a1:5c:8f:a7:cc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d828b259-757a-453d-a9ba-0ab31fc91ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:92:6d:9b:2e:d4:d1:84:8e:8c:e5:b3:1c:08:
4c:a9:54:6e:16:45:0a:bc:48:e0:96:04:17:7e:c6:
4d:ad:00:bc:80:70:c5:c0:ec:a0:c1:cd:2e:a6:54:
b4:b3:0c:76:4f:bc:53:00:d4:3f:ad:66:fe:9f:d6:
06:bd:89:ad:28:86:37:e5:c6:a3:ab:a9:83:7c:8f:
c5:0b:c7:08:f3:d8:82:85:fa:a7:11:6b:a5:df:a3:
5e:f8:73:7e:97:ed:6f:e4:3a:28:ed:f8:02:44:fe:
d7:8b:34:2a:92:24:dd:b0:ac:bf:6b:c3:e2:33:f7:
c3:14:0e:5a:f5:a8:64:72:a3:e7:39:98:14:2c:08:
a5:70:b2:72:76:83:c4:0b:b6:c0:6c:92:be:09:4b:
b3:4c:40:70:6e:60:5e:a3:c5:bb:0d:17:3c:3d:5c:
10:38:e0:e5:c4:df:ae:ca:23:11:05:37:92:98:88:
7c:82:e7:c5:d1:11:8e:0c:3a:6f:3f:4e:80:a9:8d:
e1:d9:ed:b5:35:6c:a2:2a:d9:e0:9a:51:47:87:c2:
85:55:da:e7:4e:73:87:73:8e:dd:d1:ee:50:2e:98:
3e:a0:36:6f:f1:4a:8f:9a:a6:41:06:73:94:c7:f0:
b7:2f:94:53:52:f2:7f:0d:b5:8a:f2:fa:fb:37:a1:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2B:BB:9A:15:27:4A:E6:26:DF:62:21:91:F4:06:E0:9C:56:63:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/88ec12f6-7a05-30e1-ba64-f073e2a900fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl
X509v3 Authority Key Identifier:
keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
sbgp-ipAddrBlock: critical
IPv4:
168.245.136.0/24
208.70.144.0/21
IPv6:
2604:7fc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:40:85:77:34:2a:1e:57:b5:16:53:5a:a1:d5:8e:e8:25:34:
5a:65:d5:57:22:ff:8e:8f:b7:de:ae:45:31:c9:cc:c4:8b:e7:
89:f7:c0:fa:b3:12:ac:d3:3a:ef:68:53:ad:9c:42:a5:e6:02:
71:36:0e:7e:14:67:81:87:52:26:11:3b:48:93:86:27:5c:01:
89:29:80:7a:d3:03:1f:03:57:85:34:f3:3c:1d:28:4c:c8:6f:
32:68:e3:fa:b3:57:3a:3f:46:b4:32:15:fc:20:7f:c6:8a:85:
11:d8:63:a5:01:eb:8b:07:fc:14:42:01:5e:2e:2f:d4:86:84:
67:c1:e0:0c:7e:86:ce:3c:35:04:60:0b:74:32:0b:05:d8:b7:
c7:64:ed:ee:e4:07:5e:c9:1b:a2:d5:14:67:ff:51:ce:a4:cf:
9d:99:9d:66:e6:0f:9c:2e:db:7e:6d:1e:7b:07:27:05:01:cf:
b2:fd:80:62:30:56:6f:e1:84:74:2b:48:62:3c:2e:19:f3:0b:
3b:3b:5a:f5:d4:c2:b5:09:16:0a:8f:d1:87:50:f2:55:d1:0f:
86:0d:cf:53:f7:9a:0a:1f:e2:23:e8:48:72:87:60:3e:7a:78:
1b:39:2a:6b:8b:66:46:14:28:bf:91:2a:04:f8:57:43:b5:99:
7a:c6:95:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:32 2025 by rpki-client