Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/5c5ef67e-c743-3dd0-8a4b-4975a1e8b5f8.roa
File: 5c5ef67e-c743-3dd0-8a4b-4975a1e8b5f8.roa (raw, json)
Hash identifier: cqBlQT09aGpN9JIsnbbXlq/TzCHMaLBHYPPR5LNDoY0=
Subject key identifier: C9:87:E1:C2:91:E5:D8:AE:0D:B7:68:D5:84:10:C4:8D:A3:F7:1C:43
Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial: 010D0C9F432858488C45CE6DBF8230300BBEA580
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/5c5ef67e-c743-3dd0-8a4b-4975a1e8b5f8.roa
Signing time: Wed 15 Jan 2025 02:00:39 +0000
ROA not before: Wed 15 Jan 2025 02:00:39 +0000
ROA not after: Tue 15 Apr 2025 01:00:39 +0000
asID: 46265
IP address blocks: 208.52.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8c:45:ce:6d:bf:82:30:30:0b:be:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Validity
Not Before: Jan 15 02:00:39 2025 GMT
Not After : Apr 15 01:00:39 2025 GMT
Subject: CN=8740603b-8e62-4f1e-b07c-3330da7e96ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:8b:57:99:ef:b3:2c:0c:6b:f4:9e:7d:97:
7a:8a:d8:53:47:99:70:0d:03:f0:15:34:ed:df:ec:
93:33:3e:c3:bd:1e:48:3c:58:0f:fd:9e:b5:94:d8:
86:c1:16:03:c2:4a:ef:b3:5c:24:a1:c9:e2:60:1b:
45:93:4b:18:2d:e7:a3:92:f2:f5:c4:b6:59:50:83:
f1:0d:bd:3a:71:e7:47:75:f6:09:e9:e2:e0:b0:e0:
55:a1:13:91:82:eb:40:72:e4:2a:df:79:55:fa:63:
04:8c:39:50:97:04:1c:5b:7e:b2:b8:39:42:36:64:
27:ae:6d:30:4e:50:c8:b4:18:d2:0e:71:cd:48:2d:
d4:30:36:2f:ce:44:d3:55:98:13:e8:bb:ff:84:1a:
20:2e:33:d7:e9:28:9d:96:cd:d6:fd:3c:00:0e:f0:
bd:f4:72:6b:69:f3:7b:ee:75:46:45:88:54:d0:53:
74:05:24:66:2a:52:fc:51:42:53:d3:2a:9e:e5:c0:
84:48:c0:42:38:18:df:a4:93:2d:0b:fb:33:57:41:
5c:65:6d:de:8f:2a:22:51:07:5f:56:30:9c:8f:ec:
ce:d7:d6:12:30:49:ee:d9:70:9a:5d:0a:e5:a0:00:
a6:b4:5e:19:62:bd:69:c0:27:d7:c5:37:f6:51:a3:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:87:E1:C2:91:E5:D8:AE:0D:B7:68:D5:84:10:C4:8D:A3:F7:1C:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/5c5ef67e-c743-3dd0-8a4b-4975a1e8b5f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
X509v3 Authority Key Identifier:
keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
sbgp-ipAddrBlock: critical
IPv4:
208.52.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:2b:5b:e9:a4:39:1e:42:43:cb:1e:f0:c9:07:cc:6d:33:59:
37:e1:dc:d2:ce:2b:94:e0:f9:6b:06:3d:6c:10:75:11:39:f7:
88:ca:16:78:c2:4c:cd:00:ea:ca:dd:10:8e:15:0c:82:54:78:
fd:a8:e2:1b:ef:d5:df:ab:a2:af:5e:55:eb:8e:6d:81:46:3e:
ab:3b:f7:8b:bc:8e:04:f2:06:96:63:c4:c0:5f:cd:24:98:75:
dd:96:1c:51:72:53:01:5c:bf:e2:dc:26:4a:8c:b3:bd:fd:e0:
d1:cb:2d:2e:ee:b3:9e:18:c8:7a:b0:01:90:f3:dc:eb:f1:12:
ca:5d:ae:30:54:7c:c6:fa:63:0e:e3:a8:a7:eb:ba:f7:6b:49:
e6:67:d5:b2:8b:b8:53:16:53:38:09:e9:28:19:e7:62:cc:de:
3d:9f:38:3b:5c:0e:ff:57:45:28:d4:d5:e0:ed:2a:ed:9b:be:
1f:59:5e:12:03:66:a3:9b:c1:03:f5:ce:44:e1:d4:2e:3f:6e:
3f:38:cb:cc:f3:0d:39:41:ad:0b:3a:04:01:12:cd:cc:89:d3:
0f:e7:71:d1:fb:3c:6f:6d:46:62:74:9c:2e:76:0a:c6:6f:ed:
d6:99:10:8e:13:86:7c:b9:15:b6:09:40:0f:9b:f7:7c:7f:8b:
cf:13:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:28:46 2025 by rpki-client