Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa
File: cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa (raw, json)
Hash identifier: UMOQz+vG99C/+F5Ynt58wFK79aENbkneNQd0X4MIxks=
Subject key identifier: 12:1B:9E:5C:91:4E:E5:D3:58:CB:6D:E0:33:86:96:2F:FE:CF:48:0A
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F432858486AC59E9940E916B7556D6080
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 44273
IP address blocks: 208.109.139.0/24 maxlen: 24
208.109.140.0/24 maxlen: 24
2603:4:1014::/48 maxlen: 48
2603:4:1015::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9e:99:40:e9:16:b7:55:6d:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=2a1d880e-1653-43b9-90b3-8b003763ce37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:51:4c:49:06:90:88:7d:29:24:6f:9c:14:74:
ab:f1:be:80:a2:8d:8f:5f:3d:a9:69:58:a4:0e:d0:
39:47:df:eb:6d:2b:8e:d0:8e:57:88:18:4d:ff:cc:
27:b6:ee:30:73:0a:86:3a:1f:db:16:ad:74:47:71:
c3:23:48:f5:a2:dd:d0:a0:54:88:f8:f9:ce:26:a9:
4f:70:7b:af:8e:f0:f6:4a:22:59:32:3a:00:99:37:
8e:2a:38:69:0e:71:31:fa:92:67:01:6d:ef:e4:b8:
0f:7c:e1:72:ad:56:5f:d8:fb:ac:97:f6:59:68:0c:
b9:c0:e7:71:13:9d:d7:af:ac:62:fb:0d:54:0b:79:
57:0c:90:46:fe:11:18:df:3f:45:da:03:e5:80:2d:
5d:06:46:e6:0a:4a:2b:96:50:ed:a0:0a:7f:a7:1f:
06:83:dd:2d:56:0b:98:73:88:0c:a5:77:4f:5c:ec:
aa:f7:91:90:db:bc:70:c1:97:6a:11:a7:95:31:55:
bb:a2:f2:e7:b2:71:cd:73:d1:51:62:36:aa:b3:44:
1e:2c:c7:7b:2c:61:cb:8e:c6:ad:33:52:84:aa:d3:
6b:24:8d:5d:d2:20:e7:06:87:89:ef:f0:50:74:49:
ab:c0:c7:4a:97:a4:80:6d:bf:b2:54:91:c5:87:19:
75:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1B:9E:5C:91:4E:E5:D3:58:CB:6D:E0:33:86:96:2F:FE:CF:48:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.109.139.0-208.109.140.255
IPv6:
2603:4:1014::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:0e:a8:b7:50:b8:92:ac:02:ca:f5:02:f4:b1:c2:9e:b3:38:
11:d9:62:6b:28:4f:48:89:d0:ed:29:37:de:de:dc:05:36:2c:
86:3b:cd:7a:60:8b:48:0c:90:d1:cc:e2:db:fe:92:a6:88:be:
bd:0c:c1:87:c6:36:fb:98:07:4e:80:09:f2:f9:8b:2e:1c:2c:
ee:5f:89:25:33:52:f9:ca:f5:1e:11:2c:45:bd:64:47:15:73:
c6:9d:d5:96:ca:a9:fa:70:a0:14:49:4e:78:a1:9d:3d:c7:50:
1f:db:c3:0b:f8:81:a4:0b:db:c5:ca:b7:c0:f0:12:cd:83:0a:
80:98:fc:15:1c:44:81:e7:6f:1d:f3:44:08:9d:08:db:ac:bf:
42:10:b5:af:a6:49:0f:82:94:49:8c:5b:43:fe:bb:2d:66:d4:
8c:3e:3f:0f:96:b5:e1:cc:2d:77:13:35:a2:df:45:91:c7:71:
21:b7:01:4d:72:43:51:db:e7:68:f1:59:c4:12:4e:1e:ca:07:
2e:06:82:93:d8:6d:7d:0b:d5:8c:ad:80:5a:4c:56:e5:1e:63:
b3:9f:dd:bd:07:15:0a:32:6b:23:35:c0:b9:a5:3d:95:96:1e:
f8:63:18:6b:e2:5a:24:72:d3:ce:5d:08:a6:4b:b1:a9:6a:23:
b3:a6:7e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:24:19 2025 by rpki-client