Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa
File: 93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa (raw, json)
Hash identifier: jNKj+8FQBMeefvuO+PXY4jb+tlULsZp0hrJtlSM7WHU=
Subject key identifier: C3:89:F0:1A:F2:36:13:BD:BA:29:08:7C:7F:FB:6C:EB:77:A8:8B:5D
Certificate issuer: /CN=1bf8301d-e669-4ad3-ae5b-565b863bc9d6
Certificate serial: 010D0C9F432858480BDA75A7BA936FAA4B8144F0
Authority key identifier: 5F:D7:B8:9F:80:49:3F:1D:3F:01:8C:20:A8:B8:6B:E8:94:96:23:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 8075
IP address blocks: 209.251.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:75:a7:ba:93:6f:aa:4b:81:44:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf8301d-e669-4ad3-ae5b-565b863bc9d6
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=d61fa2dc-e8a4-48a0-b942-a6d311cb50a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:8c:0d:89:b3:e5:b6:26:a5:b2:d2:3d:f5:
5d:62:69:fb:dd:b9:c7:89:74:af:f9:11:c8:ce:3b:
e7:70:79:b1:f1:ff:41:ed:12:56:47:cd:fb:b1:8d:
d0:d5:62:42:60:3c:7f:08:d9:e3:2f:a4:8a:18:7f:
b2:5e:ac:40:17:1c:db:79:29:f6:7b:68:b6:2f:42:
e1:63:e3:98:5f:19:90:f7:5d:2e:1a:3d:38:e2:89:
32:37:c2:09:29:13:84:17:37:8d:2b:63:1f:64:c6:
3c:db:16:52:bf:a4:ff:06:94:9d:4f:cd:7f:ae:59:
0f:97:8a:a1:75:98:0f:1a:c6:5a:2c:8f:75:ce:73:
4c:fd:14:dc:7d:f8:e3:43:d4:ca:f4:8c:2e:9a:04:
34:b0:79:03:4d:9c:b4:cb:ab:22:20:5f:bc:23:8b:
7f:09:48:87:c9:5e:16:d3:f7:bc:01:ec:46:1c:39:
db:2d:55:e2:b0:b3:a1:c9:67:a5:d6:f2:07:31:65:
c6:76:d3:45:97:e0:97:85:df:e4:98:24:e3:50:47:
ec:5d:89:40:a1:65:fa:49:20:1c:2a:60:b2:5b:b7:
02:e8:f9:96:30:8a:36:31:91:46:f0:87:87:59:27:
e6:50:e2:f3:7f:44:f9:e9:97:b6:fe:66:d2:e9:d0:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:89:F0:1A:F2:36:13:BD:BA:29:08:7C:7F:FB:6C:EB:77:A8:8B:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.crl
X509v3 Authority Key Identifier:
keyid:5F:D7:B8:9F:80:49:3F:1D:3F:01:8C:20:A8:B8:6B:E8:94:96:23:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.cer
sbgp-ipAddrBlock: critical
IPv4:
209.251.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:ed:80:a8:5c:be:6f:91:0d:0e:06:f4:37:30:fa:a7:d0:fa:
46:ac:1d:ec:aa:a7:98:d2:40:ba:df:79:d1:8b:5e:00:6e:84:
17:82:c6:1e:83:d1:a5:df:6e:12:d5:ed:57:0c:f6:06:11:f3:
63:41:e2:98:25:56:78:53:b9:c0:f1:cb:f0:58:51:57:fc:c1:
10:d9:c7:49:5b:22:3f:fb:0e:68:94:bf:22:9d:da:be:83:f6:
c5:48:7e:93:3f:ab:c2:62:f6:83:35:f0:37:31:c2:ab:0c:51:
b8:8c:94:d0:64:42:fb:e8:1c:89:f0:23:b7:f3:8b:3a:85:9a:
81:b4:2f:98:d4:df:41:dd:11:cc:a3:a3:34:db:15:a6:dd:78:
0b:16:f8:ae:c6:8c:83:c7:91:20:26:08:a1:c2:f8:be:ac:c6:
fe:a7:86:8e:e4:48:0e:35:18:0e:2b:c9:81:09:f6:b2:91:69:
9f:25:fa:42:d3:cc:6b:e8:85:b0:0f:c7:19:6b:b7:17:dc:d4:
ae:e2:2c:c2:73:a1:93:6a:a5:6d:11:dd:53:85:95:34:d8:2a:
7a:b3:a6:f1:14:eb:f9:1e:ca:aa:f5:7b:f7:e4:7f:b1:b6:12:
8b:96:30:b0:a7:d6:2c:b4:89:f5:b9:7b:be:a6:95:b8:6e:5c:
75:15:47:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:31 2025 by rpki-client