Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa
File: f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa (raw, json)
Hash identifier: lQJV6zdqxaNgtvjT96/tZ1smRfjnF7IQAIHlnTc/8jk=
Subject key identifier: 59:8B:80:8F:18:BB:BA:E3:04:54:B1:CC:CB:16:C2:02:22:1E:84:F1
Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial: 010D0C9F432858494B640F5EDC4102A22A693B00
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 22267
IP address blocks: 208.118.228.128/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:0f:5e:dc:41:02:a2:2a:69:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=ff6d3a28-96f6-47c2-9a17-3da8a7e33239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:34:d5:0a:9c:41:e9:e0:9a:a3:43:0d:b9:
b4:79:95:0f:3e:b2:6c:5a:63:eb:b6:36:bb:8e:23:
51:c0:53:8f:86:35:34:d3:41:a5:4b:5e:a3:39:af:
fb:02:f3:a4:0a:68:5f:9e:08:be:ae:d5:e4:47:e1:
cd:42:83:a8:4c:65:61:8c:c8:75:11:40:af:bd:64:
28:ce:62:18:07:00:ba:a8:45:ba:1a:e4:cd:86:aa:
e6:a0:40:fc:51:53:81:31:55:73:f6:67:42:8e:f0:
45:0f:d8:d8:c3:f1:82:b9:5f:aa:64:cc:8b:cb:b9:
42:fe:af:7e:96:fd:7a:0f:99:d2:76:dd:63:c2:d7:
21:5e:7e:45:ff:e2:97:0f:64:a9:cc:4c:26:ed:4d:
c1:9e:c2:e0:2d:59:7e:ec:5b:89:b9:37:cd:cf:c6:
db:e5:df:f6:84:0b:37:e0:12:78:c6:02:e3:e1:e2:
29:6a:46:ab:7b:08:26:c9:63:e0:f3:fd:3b:f1:6c:
ce:9d:80:66:f7:fc:da:eb:46:9a:f3:fc:5e:f4:23:
c6:0e:ce:31:c6:26:82:b7:65:60:9f:b9:22:ad:6d:
8d:d8:0b:7d:b8:b7:f0:7f:35:cf:cb:a7:b8:80:97:
d9:2e:94:d3:f1:5d:95:09:e2:6a:9c:09:e7:09:c7:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8B:80:8F:18:BB:BA:E3:04:54:B1:CC:CB:16:C2:02:22:1E:84:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
X509v3 Authority Key Identifier:
keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
sbgp-ipAddrBlock: critical
IPv4:
208.118.228.128/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:fe:d3:49:c5:c1:5b:5c:86:f5:da:e3:d1:d6:22:ba:0a:8e:
e9:da:17:15:40:8d:e7:2c:bc:95:e6:3d:4a:f8:cf:8a:50:81:
e3:ab:32:29:55:1a:45:e3:ff:24:62:07:52:71:22:cb:9a:f3:
32:b2:45:76:5b:b0:f6:12:e6:28:d2:3b:20:1f:74:44:73:7d:
db:2b:99:e7:0f:4c:d8:0c:0e:c9:08:73:89:26:0e:26:a4:4f:
6b:39:6a:7c:a0:33:8d:e6:94:c2:96:2f:08:04:34:0b:61:6a:
c4:80:23:19:c1:27:70:a0:5f:f8:e9:5c:ff:48:7e:ae:0a:73:
69:a4:13:f7:ca:72:67:92:ea:97:ce:cb:cd:97:d6:76:73:d9:
e6:27:4a:80:15:1d:e7:0a:be:df:2b:ba:67:70:6b:50:a9:32:
fe:f5:f1:b8:44:1c:05:3f:2e:8c:fe:c0:e0:3e:e9:87:95:71:
74:23:13:2a:10:84:ee:ec:a2:f9:08:1e:c5:dd:96:b7:fb:24:
3f:c7:ce:45:36:ab:e2:84:83:24:84:f6:00:3f:dc:97:5b:20:
dc:8a:f1:6c:6b:ac:47:9a:eb:2b:35:d8:84:3b:19:0d:c6:e8:
ed:49:b8:e2:b9:1a:96:28:b5:7c:fc:7a:aa:03:f7:51:2b:3d:
72:37:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:45:58 2025 by rpki-client