Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa
File: dfac5974-f75e-3282-b330-4ac930e4be2c.roa (raw, json)
Hash identifier: K6PRmkJH50Efj6Whq0blqZyPRoflXgVUrdkYKENIznA=
Subject key identifier: 9F:CB:18:2F:1E:1D:7D:75:FB:2C:B1:EE:BB:60:6A:6B:CE:B0:7B:EF
Certificate issuer: /CN=e0222b33-d953-40bd-9e16-838d515a3e80
Certificate serial: 010D0C9F43285848E59BC5B632448C1970C89480
Authority key identifier: 53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 30708
IP address blocks: 208.86.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c5:b6:32:44:8c:19:70:c8:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0222b33-d953-40bd-9e16-838d515a3e80
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=05c0ad77-8ba1-4fe6-989e-bc03c3589f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e5:3b:a3:39:24:a1:51:c5:2d:14:7f:92:61:
cd:65:e7:df:65:1d:6a:21:7f:4b:77:28:20:01:74:
d3:6e:dc:04:4c:fb:14:65:36:7d:df:dc:4c:ef:96:
11:7e:6b:0f:ba:01:1e:9c:7b:e5:e1:54:4b:54:f4:
2c:4d:88:48:4d:6d:2a:94:3b:62:2d:fe:27:67:8c:
70:22:ea:ab:25:e1:c3:5b:4b:1a:26:15:f5:cb:aa:
de:72:90:6e:7f:f2:51:ef:bd:ef:bf:34:45:2a:9c:
2d:f3:c1:4d:d9:4a:77:76:37:de:2b:55:92:e7:0e:
7d:9f:87:14:cf:f1:67:06:bd:a8:35:d8:ed:c5:ac:
21:55:ce:1f:f5:11:d3:df:67:00:f7:84:dc:7b:f6:
8f:38:90:52:c3:06:22:2d:9e:2b:5a:39:12:4c:30:
17:03:e4:c7:5b:06:f3:56:c1:5e:2d:6d:d8:38:e5:
63:22:0f:98:5a:31:77:0d:82:ed:f4:7c:a5:de:dc:
3b:82:59:07:bb:9d:ac:5d:3d:0d:ed:e8:1e:55:61:
33:63:26:d8:c8:72:58:b8:5e:60:84:70:c0:30:1e:
9a:7c:0b:11:45:6f:b6:35:29:1f:8c:71:49:ba:96:
c7:91:85:e2:7f:7e:2f:0a:5e:3c:40:d5:9b:f9:70:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:18:2F:1E:1D:7D:75:FB:2C:B1:EE:BB:60:6A:6B:CE:B0:7B:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl
X509v3 Authority Key Identifier:
keyid:53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:a6:f9:57:8f:33:e6:fd:2d:19:7f:41:04:68:fc:30:c5:b0:
46:aa:27:69:61:b9:b8:42:31:4d:08:eb:0a:a5:c8:13:08:ce:
64:8c:62:8c:0c:b0:b8:8e:18:13:b4:29:92:db:5f:bf:cb:21:
fc:6d:18:b7:a1:06:40:3f:81:01:79:af:f5:b2:31:5a:83:24:
11:3e:78:21:e6:26:94:5b:8b:86:ff:58:c7:4d:dc:a1:07:9d:
df:82:52:e0:20:8d:85:d6:d0:f7:d6:e3:19:91:95:48:d5:7f:
e3:a0:f8:1f:61:71:70:a3:cc:3b:1a:c0:30:ef:66:42:6e:fa:
35:9b:5d:01:1f:d3:cd:26:5f:4e:0c:c4:89:9c:3f:ca:1d:44:
94:51:6e:cd:2f:16:2f:1a:87:db:69:09:5e:af:92:fe:e0:71:
c2:22:d3:bd:20:a4:22:53:b1:8f:1c:3d:cd:20:24:5c:7a:c7:
30:c2:db:cf:80:73:6d:62:18:dd:91:f3:3f:ea:d0:d8:38:65:
27:3e:42:7f:e9:f2:16:5d:af:61:56:52:9d:ad:9f:b3:7c:5e:
bb:b8:24:a6:a5:d9:87:26:ce:7a:0b:ac:81:f0:06:2d:a3:f0:
af:d4:22:f1:07:23:81:e3:b8:62:f9:f5:2f:7b:b3:e3:70:33:
ce:70:8c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:39 2025 by rpki-client