Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa
File: ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa (raw, json)
Hash identifier: xx286uC0z28LVQqd86VtIgGKW+18cqn9MbS/0nNSUKQ=
Subject key identifier: 27:12:FA:F4:B3:12:14:66:CC:DC:3E:89:B9:4E:2E:2A:EB:CE:39:37
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482EC012D3C0A1DA4FED616140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 7342
IP address blocks: 209.131.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:12:d3:c0:a1:da:4f:ed:61:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=12a65c95-84b3-47d3-a31e-501fa145b013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:50:7e:43:ab:aa:24:7a:ef:1f:2c:90:9d:3c:
02:a8:78:69:18:c0:d9:2d:0c:ef:95:75:02:cc:b4:
93:4b:87:42:83:62:7a:df:fc:eb:f4:9f:58:dd:f0:
2f:f7:ce:ac:f3:3a:24:a3:bf:ec:2b:2e:fc:a9:c9:
5a:12:5f:1b:11:2d:a6:5e:6b:01:e0:fb:06:7f:10:
4a:75:a8:1b:11:4e:f0:c5:cc:eb:6c:9d:0f:8f:ef:
b5:b7:f0:23:b0:ba:57:90:da:91:a8:82:e9:88:5d:
14:ca:e0:62:15:96:b7:23:22:41:8b:7b:c2:68:b4:
f9:04:4c:81:7d:e6:71:3b:34:09:ac:f3:75:fb:19:
88:6b:21:49:b8:00:e6:a0:d4:23:d1:d4:18:ae:5d:
46:d4:c0:02:c9:4b:7b:00:7d:07:ea:f4:bd:44:64:
3d:c3:22:50:9e:b6:10:10:5b:09:7a:af:25:d7:7a:
cd:a0:83:57:77:f7:7f:7e:21:c7:4e:05:a7:1a:9c:
7b:45:24:0f:30:5d:02:46:f8:82:2d:40:b9:8c:ce:
d3:34:c4:41:de:17:8c:7e:d5:3b:1a:35:df:97:3f:
c0:70:79:73:fa:f1:3e:4a:21:c6:e5:68:70:b0:9a:
d7:b9:cb:93:76:f4:94:ca:52:13:b4:dc:33:bb:af:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:FA:F4:B3:12:14:66:CC:DC:3E:89:B9:4E:2E:2A:EB:CE:39:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:21:8a:b2:35:56:76:c4:62:b3:c1:cb:4c:a2:12:43:a2:44:
28:3a:2f:f5:bb:a6:1e:58:c4:4d:6b:cf:3d:5b:ab:8a:18:33:
97:3a:56:54:fc:88:a4:4b:e0:25:c0:65:e0:16:eb:ac:05:73:
e1:03:59:41:3d:c5:b0:85:d0:7a:b9:20:08:26:49:f7:04:3a:
b4:7e:77:20:e4:72:99:03:64:45:67:1d:3f:18:f9:91:e0:23:
35:f6:cc:64:19:b6:54:b6:4b:8f:71:7c:da:ef:bb:31:2a:02:
73:dc:f4:6d:cc:f5:f6:e9:80:30:59:e3:2c:39:72:e6:08:fa:
57:6e:83:99:f8:0b:14:69:4b:71:05:1b:79:75:e4:99:ef:e2:
f5:0b:89:49:01:c1:5d:8b:ea:9e:33:cf:74:bd:2b:aa:d3:ac:
a4:71:7b:14:06:9f:e9:83:95:58:03:06:6d:bb:fa:51:11:bc:
ba:0f:dd:1b:33:20:a4:d9:b9:94:39:44:6d:0e:6c:94:6b:a6:
44:73:ea:73:03:98:15:a3:3c:1d:13:61:12:6e:91:ad:4d:e2:
7a:ee:e5:cc:c7:22:8f:83:1a:30:f3:36:32:c6:33:a3:2c:26:
30:0f:65:44:00:41:fc:39:ad:fa:39:53:5e:75:d2:cb:02:e3:
af:88:68:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:35:52 2025 by rpki-client