Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/67704826-2c58-324d-b3ac-37ab0e49ba09.roa
File: 67704826-2c58-324d-b3ac-37ab0e49ba09.roa (raw, json)
Hash identifier: HVIaAzpZYsDZyjfGmqhy4GhM91HJzj4B8znvzJiHV7E=
Subject key identifier: 72:B3:7B:7B:67:8E:15:6E:BE:DE:B5:91:60:20:D5:21:00:D7:BF:0D
Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial: 010D0C9F43285848E00657D096BFB537C2993800
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/67704826-2c58-324d-b3ac-37ab0e49ba09.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 208.52.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:57:d0:96:bf:b5:37:c2:99:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=646f9d76-1681-46ba-bb80-30cd2ce9dbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e9:68:1c:77:7f:b2:35:0f:60:92:8b:5f:15:
d7:78:fd:b5:bd:ca:93:37:7e:af:65:d7:6e:6b:f1:
c4:b1:e9:1c:3c:3f:f5:f0:a3:3a:a3:4e:37:43:d1:
8b:9f:9c:4e:e4:b9:78:6c:b0:53:5c:99:37:06:fe:
4a:4d:a3:96:4c:bb:44:e2:e9:81:43:29:ef:ca:02:
a0:19:d0:b0:0d:79:8e:06:f0:37:24:c8:b1:d1:df:
2d:3d:06:61:0e:87:76:77:7d:e9:ad:3d:7a:89:bd:
4c:48:31:db:c6:0b:32:91:de:55:ab:0d:1b:8e:70:
1f:0c:b4:5c:17:eb:11:38:be:1e:55:5e:f1:b5:26:
04:6b:15:04:62:8b:9c:b1:90:94:e9:2e:5e:88:1a:
df:c7:52:d4:a3:1f:8a:49:54:dd:4b:56:8e:ad:54:
06:83:fa:8d:09:4e:1d:c8:af:52:b9:b0:90:c6:0e:
e0:8e:a7:dd:32:d9:99:5d:1c:e8:84:0e:19:1e:a7:
b7:15:04:f5:53:22:cc:4f:a8:19:a4:58:97:2b:c0:
d1:e8:9d:d5:27:8e:16:85:fc:6a:2f:0f:58:d7:c4:
07:c1:53:13:fb:a1:84:c9:4e:9c:2f:16:48:2c:71:
61:0a:2d:96:5f:75:e3:65:a4:26:9d:97:84:19:c3:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B3:7B:7B:67:8E:15:6E:BE:DE:B5:91:60:20:D5:21:00:D7:BF:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/67704826-2c58-324d-b3ac-37ab0e49ba09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
X509v3 Authority Key Identifier:
keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
sbgp-ipAddrBlock: critical
IPv4:
208.52.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:11:d5:56:a6:db:88:eb:c5:bd:56:df:df:da:77:a7:dc:d8:
06:1a:aa:e7:05:2a:86:e6:1b:03:f6:c6:73:bd:2e:5e:c6:11:
71:4c:0e:33:b4:ae:00:a8:ba:87:0d:2a:1b:38:68:cc:bc:f7:
86:dc:ef:3a:78:8a:44:26:bf:f6:ba:2c:bc:0b:82:c7:b8:ce:
44:05:8a:15:15:3c:a7:13:00:2d:df:d3:6e:61:6c:a4:db:18:
69:a9:66:95:39:61:95:13:b9:9e:c2:37:d8:e9:a2:0e:19:21:
49:56:17:0c:92:fe:71:f6:85:6c:3e:33:88:14:01:ee:21:76:
e4:f4:8b:47:fa:42:04:fb:59:25:e9:32:22:6d:d5:e8:58:76:
6b:bb:bc:d7:52:3d:46:1d:36:e3:48:59:be:f6:8e:3d:af:08:
02:da:11:c6:c4:59:5e:32:18:b5:05:30:e3:17:a6:bf:26:62:
6f:0d:cc:8b:04:8a:b9:91:82:1a:03:14:c6:66:19:16:ad:c6:
4c:52:c2:64:1a:e2:25:28:3d:18:54:c8:b7:92:ff:04:27:9a:
06:21:3c:6c:c7:d7:67:24:38:00:c7:65:3d:9f:0c:94:be:8d:
5c:fa:d3:0e:a7:a4:d1:dc:93:48:7d:4d:6c:62:78:a8:8d:ee:
04:4b:50:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:26:10 2025 by rpki-client