Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a62172e9-c7e4-3d26-9a69-796d2e297924.roa
File: a62172e9-c7e4-3d26-9a69-796d2e297924.roa (raw, json)
Hash identifier: eSfb+p/SrghygGtjtmMtwnaIGrzKUtuYO17ECXjfKp8=
Subject key identifier: 13:24:4C:B8:93:F5:33:8D:BF:42:C4:94:D8:B1:07:5A:43:4F:A5:DF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848D64115A7F12CA24239189220
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a62172e9-c7e4-3d26-9a69-796d2e297924.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 14917
IP address blocks: 208.254.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:15:a7:f1:2c:a2:42:39:18:92:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=865df0f0-3753-4e3d-bf12-977218bc88f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:24:e6:0d:51:75:fe:05:cf:6b:30:02:f0:
0e:a1:b2:77:a8:17:6e:3b:eb:9b:5c:98:c4:ff:e9:
ef:ab:ac:77:ac:19:11:a5:d1:f0:fd:0f:d0:93:40:
7d:9e:16:fb:ba:e6:85:f4:c2:58:49:94:f0:62:c5:
67:81:21:f4:2e:4d:e7:46:dd:e3:a2:28:f0:ea:ec:
07:72:7e:fe:10:30:25:5e:04:24:dd:1a:35:93:2c:
7b:30:fc:e7:a0:0f:35:38:c0:26:6c:4e:fc:4f:b4:
0d:22:aa:ad:62:4e:dd:8a:39:a0:ea:26:0a:0d:df:
62:77:18:ad:57:5d:aa:84:1c:68:6c:a6:95:e7:4e:
6b:06:39:1c:1a:51:68:ef:68:d6:42:43:69:0c:f8:
d6:62:38:7b:e1:1f:92:17:02:31:0b:56:55:c8:8c:
d4:f5:d2:c8:a5:2d:9c:4c:a1:b2:dc:72:ad:72:b4:
04:c1:e9:4c:5c:91:e4:ae:11:6a:f9:e7:67:4f:2d:
84:99:53:3a:79:18:a2:2d:3c:7f:6a:af:7d:63:46:
2c:4d:38:e3:1a:a4:98:26:fb:25:7d:2d:25:9b:5b:
8f:cb:ee:29:d8:d0:4f:db:80:d8:21:a7:d3:39:1b:
1f:2e:80:41:8e:63:c8:48:df:54:24:2d:64:c3:9e:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:24:4C:B8:93:F5:33:8D:BF:42:C4:94:D8:B1:07:5A:43:4F:A5:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a62172e9-c7e4-3d26-9a69-796d2e297924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.254.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:69:6c:f0:ee:20:37:45:c3:62:43:81:17:a7:6b:c3:a5:5f:
4e:00:99:ac:4e:c1:7a:ec:48:c9:75:18:43:c1:d1:9a:ef:09:
cc:12:fc:34:ab:ab:a0:ab:98:b5:ea:ed:16:82:bf:01:89:ae:
57:2c:fb:09:e7:c4:c1:b2:03:da:d3:cc:38:3e:79:13:a7:50:
d3:8e:91:2d:03:8a:82:22:a7:b8:03:f9:9f:14:4c:69:9c:b5:
7f:10:4e:d4:1a:31:dc:68:28:78:45:a3:4a:a1:dd:2b:ce:a4:
b5:5a:8c:b7:42:4c:1d:6f:6a:3f:5d:30:54:4d:f1:75:bb:f1:
f8:c3:bb:d1:c1:7c:c9:76:52:dd:e6:61:94:db:f7:59:6e:7a:
b3:4f:68:81:ea:61:0d:53:c6:57:b7:16:ad:df:b4:e1:23:79:
53:0e:ef:40:a6:c5:6b:02:81:27:a0:7b:4a:c8:49:33:c5:7c:
cd:f3:e1:05:8c:9f:20:c5:7b:76:53:c6:db:9f:7e:08:3d:a5:
4e:2e:11:94:9b:da:56:55:36:0d:b3:f5:42:37:3d:7b:37:72:
a8:c8:d0:9a:79:05:e6:8e:a2:d3:c1:ad:e4:a2:2d:6c:ca:b6:
33:9e:17:63:62:16:55:7d:4e:22:95:b0:4e:7c:99:e4:61:7b:
f1:22:b9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:52 2025 by rpki-client