Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/152f32a0-93a6-33be-b38c-90bdccf34db7.roa
File: 152f32a0-93a6-33be-b38c-90bdccf34db7.roa (raw, json)
Hash identifier: bqKXLQQmIbLsPdIi/ml2mq3F7vW7hubL1pmr9vrFtKE=
Subject key identifier: 6C:26:A8:22:A5:3D:C0:25:9E:81:AF:67:15:24:F8:94:CB:0F:F8:EE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848ED4C673BDE66C798257BB840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/152f32a0-93a6-33be-b38c-90bdccf34db7.roa
Signing time: Tue 18 Feb 2025 20:07:25 +0000
ROA not before: Tue 18 Feb 2025 20:07:25 +0000
ROA not after: Mon 19 May 2025 19:07:25 +0000
asID: 14618
IP address blocks: 208.213.176.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ed:4c:67:3b:de:66:c7:98:25:7b:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 18 20:07:25 2025 GMT
Not After : May 19 19:07:25 2025 GMT
Subject: CN=c55499ef-4908-4441-8f62-1469db50ab3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:96:3d:a5:9d:b0:ca:93:59:3d:10:03:4d:
03:21:0d:3c:55:8d:56:cd:c2:84:4c:e6:99:f6:f7:
89:e6:f5:23:1e:bf:e6:b3:2f:77:ab:dd:5a:fe:14:
8d:60:c7:18:d0:72:88:54:10:20:35:de:45:ce:17:
c3:d9:27:08:57:7f:38:b8:c1:77:9a:3f:20:a7:a9:
38:ae:17:50:94:c9:5a:09:d3:b0:fe:8e:53:9f:7d:
b0:26:03:8f:50:0f:17:be:15:b7:93:1d:28:a2:4f:
54:4e:5d:52:14:a7:fd:37:f8:c5:f4:ec:9e:ff:cc:
28:d4:d9:92:45:7f:02:cf:3d:b3:9f:47:ed:8c:d6:
88:d8:f3:c6:f9:1f:c5:ee:c4:e5:ff:33:d7:ac:aa:
fa:66:cd:60:b8:07:27:02:25:4e:9b:37:77:55:53:
b9:31:38:db:a3:09:35:c7:de:97:2e:cb:1a:32:f9:
d7:13:cd:fe:75:05:8e:47:d0:ab:e3:19:ae:d8:7a:
9d:32:25:26:ef:76:5a:40:41:b5:ae:75:7e:ab:e5:
c8:5d:1f:88:ed:9b:4e:bc:76:87:e2:04:e1:d8:24:
68:43:2e:20:ad:4e:bb:6c:e0:c4:7b:a4:8c:01:cb:
61:c6:08:17:00:67:35:49:30:9c:6d:bc:fc:ca:d2:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:26:A8:22:A5:3D:C0:25:9E:81:AF:67:15:24:F8:94:CB:0F:F8:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/152f32a0-93a6-33be-b38c-90bdccf34db7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.213.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:5b:18:91:98:98:95:0d:19:02:75:8b:48:5f:6b:08:f1:47:
18:d4:d7:8c:bb:0a:e7:f3:7c:00:02:34:05:f6:4b:65:b1:f2:
bc:79:84:9e:92:96:e1:8b:c6:9a:c3:20:d2:f7:0a:5a:6a:b9:
bc:f5:3b:86:f4:51:11:02:38:f4:02:81:28:ad:ab:78:d1:62:
50:55:36:4a:eb:98:15:af:f5:b8:87:08:73:b2:b9:41:c9:31:
c4:8c:ba:33:b7:64:4a:b6:73:9c:c6:dd:84:2b:61:c2:45:55:
8d:75:05:4c:b1:b3:53:d3:ce:5d:8b:02:33:c8:c3:b6:d9:40:
78:0b:dc:ba:f1:17:cc:ac:6c:9c:56:11:f2:84:e6:21:9e:41:
52:db:d8:11:27:30:ed:8a:9b:3e:28:be:dc:e1:cb:79:ac:f4:
ea:d4:8a:2e:99:fc:dd:da:52:00:09:96:0e:d7:ed:11:15:a6:
ef:f9:15:f0:8e:9b:c3:01:13:e1:9c:83:cb:ca:f2:2a:a3:43:
2a:9e:54:1a:cf:07:3e:5f:ef:0e:e6:b7:ae:48:70:7f:c8:75:
0c:9f:c5:33:bb:7a:08:ec:31:a2:f2:2f:c0:70:2e:38:bd:9d:
91:7c:b9:a7:74:4d:d3:6c:55:cb:2b:3d:0b:b0:c8:33:a6:96:
a7:1d:7a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:30 2025 by rpki-client