Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa
File: 9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa (raw, json)
Hash identifier: Bk308/90GIfY4sPswCvAfDnmB9JFH9STpcooI7oBKDg=
Subject key identifier: 04:6B:EB:92:DD:12:9D:A2:44:66:00:43:C1:58:87:5C:D0:DD:93:95
Certificate issuer: /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec
Certificate serial: 010D0C9F432858487FB5D87B66E172B6FCA51600
Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 209.127.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:d8:7b:66:e1:72:b6:fc:a5:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=00b69a2c-478c-4c17-b372-29dc5a245d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:21:8e:dc:db:50:4c:02:b0:e2:65:0f:ea:
5f:48:fd:88:28:d0:15:5f:f2:3a:d9:1a:4e:02:b7:
4a:2d:cb:05:a2:33:6d:58:bd:90:84:b0:42:65:08:
70:a5:10:74:f7:c5:5c:ab:de:f1:d7:6c:e4:04:d7:
c6:33:c6:9e:97:6a:b8:d7:38:6a:1e:7f:04:5e:02:
e4:99:07:7b:f9:72:62:ca:81:cc:f9:7e:b0:77:19:
b3:d4:90:52:e6:f6:a8:8a:85:dd:a5:89:88:fb:d4:
7a:90:85:a1:ec:e6:1b:bf:c3:32:9c:0a:09:b5:b2:
1f:6f:c3:52:1c:c6:ac:5b:d6:31:fe:92:ea:bd:72:
6e:09:d8:c8:3e:2d:d8:e1:15:db:3d:45:41:00:72:
1c:c2:f1:10:e8:9f:4e:01:16:8b:ea:be:a5:24:b6:
c5:b5:15:00:6b:b3:12:08:a4:5c:c2:de:ad:97:c8:
59:bc:ff:bb:eb:8b:2d:fb:97:0e:8a:57:a2:ca:46:
48:fb:9f:65:03:e1:f7:16:20:a4:92:98:f2:45:e6:
de:4d:47:06:41:bd:98:e9:a6:cc:44:16:24:bc:6c:
52:a9:a2:69:04:8a:a7:48:b7:70:9c:ea:42:01:90:
9a:27:ff:19:c9:7d:a5:ec:6d:36:75:8b:6e:af:d1:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6B:EB:92:DD:12:9D:A2:44:66:00:43:C1:58:87:5C:D0:DD:93:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl
X509v3 Authority Key Identifier:
keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer
sbgp-ipAddrBlock: critical
IPv4:
209.127.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:ee:9d:83:dc:57:9c:89:c3:03:76:a4:71:7a:a1:ed:e5:9c:
54:bf:81:96:0b:83:c4:e6:8d:ab:27:0e:32:66:33:17:05:27:
a7:ce:d6:e7:e7:10:09:02:01:c8:69:66:f4:5e:d4:cf:84:29:
ef:a9:d2:be:a3:b2:c0:0e:1d:55:51:9b:c5:a0:ed:65:a5:2b:
c7:83:3c:0d:3e:48:77:1d:74:f9:82:58:99:fb:05:13:6c:e2:
e6:95:90:00:2c:c4:28:11:bd:a4:63:77:8e:d0:c8:02:96:dd:
01:7e:41:60:aa:ff:77:75:c2:21:e8:e6:7f:79:e0:8d:66:06:
8b:d1:c6:08:20:66:7e:f1:60:be:55:aa:89:92:3a:1b:b2:98:
29:86:a9:d5:dd:26:c9:1a:ec:67:54:47:f8:e8:79:05:48:51:
88:54:df:ec:0d:73:ab:b8:4b:a3:63:6b:9f:b8:48:6d:75:15:
0c:5e:ce:f1:37:99:ad:4e:48:77:2a:7e:25:ff:03:ff:30:ac:
0a:4d:05:f0:11:4c:fd:e1:38:8c:96:38:76:fb:0c:30:2b:d9:
ce:3e:c8:32:39:cd:0d:0f:b4:d6:36:f6:e3:16:8b:54:50:e0:
2a:a5:fa:6b:c8:39:11:d2:dd:fa:1e:bc:77:8f:9e:44:16:7e:
10:f9:93:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:50 2025 by rpki-client