Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa
File: c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa (raw, json)
Hash identifier: MnifNn48GzKBJIdFf+rXcFwVRq1BjW1cwOfGt6A/ng0=
Subject key identifier: 22:47:D0:52:C3:60:69:B3:E6:7C:75:9E:55:F8:D6:57:8F:8C:66:ED
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F4328584961B991A33A3965FD01AE2C20
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa
Signing time: Tue 01 Apr 2025 13:01:00 +0000
ROA not before: Tue 01 Apr 2025 13:01:00 +0000
ROA not after: Mon 30 Jun 2025 13:01:00 +0000
asID: 29968
IP address blocks: 208.20.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:61:b9:91:a3:3a:39:65:fd:01:ae:2c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Apr 1 13:01:00 2025 GMT
Not After : Jun 30 13:01:00 2025 GMT
Subject: CN=06b724e9-8c2f-4e83-be50-3442b42dd17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5e:1b:9e:3a:3a:44:4f:67:71:29:ab:c8:c7:
3a:ae:d9:88:ac:69:56:67:64:4a:9a:da:b2:16:d0:
9f:14:5c:e1:be:0e:c5:c4:d0:16:e7:d7:8d:71:1c:
5a:c1:4c:08:03:6b:6d:05:44:94:3c:16:3e:fa:e1:
68:d3:0d:a6:ed:cf:94:07:bc:10:de:de:2d:5d:f9:
88:1d:ac:42:a5:15:7e:c6:52:0a:9a:9d:13:ee:73:
54:a2:3a:91:69:77:b5:91:14:df:76:81:92:64:d1:
dd:fe:4e:6e:cb:f5:3b:84:bb:b0:33:7d:57:1c:36:
e0:b3:9e:fb:1d:4f:b3:11:4e:24:cf:0c:c0:30:74:
eb:48:49:f3:d1:a7:39:62:23:03:7c:91:f1:36:9f:
32:a6:3b:b3:42:c3:63:ed:33:fc:b0:2f:a4:3a:42:
4e:3c:21:db:4f:75:2e:3b:79:ef:1e:f0:22:79:cc:
54:99:be:d2:1f:91:73:59:4e:e5:ba:22:6f:b8:83:
48:d4:f0:f0:b8:97:e2:c2:26:82:3c:91:c9:3e:48:
07:c9:4e:96:36:0f:67:cf:db:97:48:9e:b6:e4:f2:
0b:48:89:7f:16:c8:86:e6:65:d0:bf:3d:e4:34:5d:
4f:39:d2:ca:8d:3d:38:e8:63:4e:cb:0a:8d:59:b4:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:47:D0:52:C3:60:69:B3:E6:7C:75:9E:55:F8:D6:57:8F:8C:66:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.20.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:f0:bc:a7:f2:07:a5:b7:54:01:e6:95:e2:20:69:12:d9:db:
f1:ca:ae:3c:98:29:23:0f:73:e4:24:4a:b0:c6:d8:7e:4d:99:
53:90:96:a6:b5:6e:2d:1b:84:49:94:19:c3:43:79:61:94:63:
72:65:3e:76:27:bd:22:84:55:06:07:89:7d:3b:4f:56:d5:d2:
dc:45:6f:90:1e:22:dd:c5:7a:ff:68:19:d1:d0:e4:99:16:c3:
7e:c9:e3:32:14:0c:e2:33:b1:40:e0:74:cd:a7:7e:43:31:39:
f6:eb:32:eb:4c:93:26:fd:01:a4:bf:e9:6f:09:e9:8b:5b:bd:
83:14:f4:75:fd:14:96:b8:60:18:21:ce:93:8c:ff:e2:16:56:
db:33:5f:ba:54:26:61:65:07:08:77:47:4f:06:1b:45:82:81:
b4:71:37:68:95:a6:89:26:b8:3f:e7:68:3f:1e:9a:fa:a8:75:
e5:63:fb:5d:44:11:9d:28:99:01:da:7e:cf:73:d7:75:f4:2f:
ee:2e:e8:9a:ca:0a:ee:a5:6d:5b:04:0c:97:01:70:2c:a8:86:
5b:66:7d:70:59:41:1f:df:8d:e9:09:37:e2:86:ab:4a:a4:5f:
f6:79:ef:f9:fd:d0:e7:71:49:f2:07:ed:01:3f:28:83:6e:4f:
56:58:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:37 2025 by rpki-client on console.sobornost.net