
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa
File: 041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa (raw, json)
Hash identifier: aiOe8ilzCAftzkgXNS4/6ELCFxGIP2TSwP2fPXnGj8Q=
Subject key identifier: F0:3F:4A:BC:A6:90:D9:C4:33:4E:C9:8F:38:73:AE:BD:DB:52:8F:6B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584834558DA431E0BD5AA5EED080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 209.131.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:8d:a4:31:e0:bd:5a:a5:ee:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=3d37c584-a650-46cf-8110-9dbe4a17e736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:53:9f:0b:62:19:61:77:8f:44:f4:d2:04:64:
16:68:86:01:6f:72:f9:a0:c9:76:41:6f:8e:3b:7c:
ee:a9:1b:c0:39:35:57:bd:5a:4f:52:c4:f9:62:50:
45:69:31:13:6f:43:2f:16:a4:bb:d5:82:93:e6:ad:
94:70:d7:c3:4b:96:98:23:b8:ef:54:3b:7c:e5:2a:
a8:81:a8:7a:a0:6f:48:b0:87:0b:24:88:61:91:bb:
5f:e8:62:ea:53:37:2d:5d:e1:77:6f:e1:10:fc:dc:
e4:59:92:4b:53:53:9d:1e:7b:b3:79:ca:df:2b:75:
b0:81:b2:ff:08:97:fb:c2:2c:ae:81:75:5a:be:aa:
f7:e1:c5:7f:d7:89:57:e1:c5:93:ab:1e:be:62:bd:
a5:ac:4d:b3:ba:81:d7:41:42:90:83:fe:e2:d6:75:
e8:b5:63:ba:c3:37:6d:98:80:8a:62:1b:27:74:26:
14:4e:0a:cf:0c:42:4e:0c:56:1a:97:82:41:e6:2f:
82:43:da:17:63:f0:99:b6:5d:2c:27:85:89:6b:51:
40:0e:a4:86:02:5d:1d:ef:a6:67:5b:c9:92:55:e6:
e1:a1:9e:77:55:3c:23:e4:6c:c6:e2:3f:68:89:be:
38:df:98:9f:56:f2:39:32:b6:d9:e4:5c:51:7a:b8:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3F:4A:BC:A6:90:D9:C4:33:4E:C9:8F:38:73:AE:BD:DB:52:8F:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:90:4c:c8:bc:a7:be:66:ab:d8:ca:67:d9:28:88:de:f9:5b:
65:58:b6:5d:8a:39:c4:ff:53:dd:43:c7:5a:75:c4:8f:b6:c1:
9d:a9:33:03:74:91:5f:62:cb:f1:2d:67:b2:59:1f:43:ba:52:
0d:ca:5a:17:de:c0:51:82:75:c2:79:ff:8d:c4:8e:4c:b4:46:
1b:2a:c3:7e:2f:c4:30:8b:05:a1:db:91:ac:79:04:b1:38:d5:
6b:2a:ab:16:c6:3f:50:ec:46:38:44:d3:c4:90:c6:22:2e:ac:
2d:06:21:95:a3:af:6d:d8:de:b6:6b:a0:ce:da:81:b6:e1:06:
84:7c:4c:cb:66:ff:1b:f7:32:cb:84:7d:3d:ed:04:ab:e0:fb:
df:cc:9b:15:b7:b3:b7:9e:95:9e:85:88:02:8d:77:03:7b:8f:
a2:e5:b0:83:42:c2:68:ec:bd:e7:0f:ec:e9:23:da:10:18:4e:
4f:f1:4b:50:fc:c7:cc:46:b3:9a:0f:96:5f:f2:1d:35:d6:ca:
06:cf:c2:83:6d:0c:13:a5:30:e5:b4:59:82:8c:91:58:5c:52:
c3:22:0b:4a:df:7e:7a:c7:4a:95:d4:74:07:98:44:d4:62:fa:
ac:92:e6:ab:62:c7:4e:10:ac:83:d7:40:ce:57:bd:3b:e6:73:
f1:75:c8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:52 2025 by rpki-client