Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa
File: d8d9475d-3273-347c-bebb-562c1777f770.roa (raw, json)
Hash identifier: kS5+0LrGTU6vm4mhs5Dkl5ha+XBTNO2yzj2UqWVeanc=
Subject key identifier: 30:77:EC:5A:72:53:EE:E6:5D:DD:16:DB:3F:5A:74:AF:5A:23:B0:48
Certificate issuer: /CN=cfb7045d-2d5f-4c56-bfa4-e35f745a61f8
Certificate serial: 010D0C9F43285848DEA1151A9AB3427093EC1E60
Authority key identifier: 87:08:FA:CC:1A:BD:61:90:0F:41:14:19:3A:6A:01:FD:DA:5E:6B:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 6939
IP address blocks: 208.65.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:15:1a:9a:b3:42:70:93:ec:1e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb7045d-2d5f-4c56-bfa4-e35f745a61f8
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=4e232cb8-bfe4-4488-9caf-d5f9e33aff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:d8:65:36:ff:42:a3:bf:98:af:74:f8:c8:
ad:6c:1d:1d:b2:2c:b9:45:60:e2:9a:49:ac:3f:d9:
31:ad:e0:fc:c8:84:49:65:bf:11:2d:14:80:92:f6:
a5:19:b5:82:6f:d3:fd:30:50:7b:d9:8b:cc:4c:ec:
a9:19:86:63:65:25:99:b3:96:3b:b2:b3:9f:e0:79:
9f:ab:55:61:ee:c3:e6:93:59:45:25:3d:b4:49:1a:
1e:7b:4d:f6:5a:97:19:1a:1d:0d:0b:96:fa:df:34:
9e:34:1e:35:dd:30:59:b1:f8:f4:e2:49:39:4b:f8:
f0:15:d6:c0:65:01:39:50:e7:5a:3c:77:8b:59:73:
60:e7:f9:d7:ae:d6:0c:6f:1c:34:49:00:11:ef:cc:
82:ab:48:43:dc:b7:95:8d:a8:9b:5a:bf:0a:3f:39:
b1:34:94:73:60:cc:b6:ba:6f:2b:4c:e0:9d:ab:d9:
86:54:d1:ae:24:f5:df:45:4f:37:25:c5:60:ab:4c:
48:32:7e:ce:b3:56:58:94:c8:1f:d1:47:2a:06:f6:
12:7b:94:4d:7d:2f:0d:46:d9:05:6e:24:21:ee:d4:
cd:a6:b5:52:7d:56:bd:b0:e6:b8:81:59:e7:e4:1f:
5f:a8:d3:d9:b6:53:7b:20:ac:c6:bc:0c:11:48:bd:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:77:EC:5A:72:53:EE:E6:5D:DD:16:DB:3F:5A:74:AF:5A:23:B0:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.crl
X509v3 Authority Key Identifier:
keyid:87:08:FA:CC:1A:BD:61:90:0F:41:14:19:3A:6A:01:FD:DA:5E:6B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer
sbgp-ipAddrBlock: critical
IPv4:
208.65.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:27:4b:bd:0c:51:35:f4:79:1f:a0:fe:15:70:a5:7c:8e:d5:
13:2f:f6:fe:5e:fc:d4:04:71:21:6f:38:31:21:a3:d1:e2:ef:
7e:c3:81:43:a3:52:75:92:a9:70:e7:7f:0b:ad:1c:87:d9:d6:
c1:46:8f:e8:5c:ff:ba:2f:3e:55:8b:6f:8a:81:30:58:bb:9f:
3c:3e:87:2f:09:56:77:ab:5f:e5:7c:1c:65:c1:b0:68:30:ab:
93:22:46:09:02:4f:c7:4a:c8:48:01:b6:0e:2c:df:a2:50:87:
f0:1b:6a:ad:24:d7:ed:4b:97:97:c8:a5:f9:1a:6f:ec:4d:9e:
ba:97:49:71:54:40:41:90:ee:bf:fc:90:98:77:5e:a9:d3:9d:
e3:89:2d:9c:89:f6:26:d8:31:c9:3c:13:16:4c:f0:f7:20:92:
6c:a5:16:90:f9:f9:30:ad:43:7b:19:12:0c:43:fc:e0:18:33:
6e:e2:bd:82:0b:b3:14:f0:ed:1f:a7:ee:c7:1e:fb:8a:be:ae:
d1:8b:76:87:ec:8c:f0:6a:21:4f:b9:bf:e4:35:82:c2:3a:cf:
dc:07:87:79:97:17:68:40:7a:07:7a:f4:94:93:04:a8:a6:ea:
9b:fd:dd:58:ae:a1:6e:7a:f3:da:ae:a2:a1:37:ba:11:2f:b3:
5e:58:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:56 2025 by rpki-client