Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa
File: 6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa (raw, json)
Hash identifier: 2BFcViyqz1fR6HKnOI6V0dAqjuYhB42wHTubqeTnr+U=
Subject key identifier: D1:EA:EC:1F:F2:F5:68:60:A7:66:49:3C:4C:A0:65:E8:EB:88:17:E3
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858483B501340F844DCE1E1AE3880
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 394708
IP address blocks: 209.173.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:13:40:f8:44:dc:e1:e1:ae:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=437f9776-dde8-42fb-aa29-3a672372f226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:bd:13:32:92:b3:9d:49:ba:df:26:f0:23:
c7:e4:fa:1c:9b:d3:59:88:6e:f1:ab:93:3c:e9:56:
34:01:1a:02:1c:ad:2e:91:f2:d1:bc:61:11:57:0f:
9c:64:73:96:9c:cd:5d:34:fd:ad:47:37:7f:3b:33:
f2:d8:bc:53:5c:c0:a4:d9:d2:40:e6:fd:56:a6:e9:
a8:cb:ca:f4:70:78:ce:47:99:c7:22:f0:8e:87:b1:
ca:3a:ac:3b:88:05:71:34:08:0d:f4:60:f3:7c:f0:
fd:45:ef:5d:31:a3:1f:7d:ae:50:68:09:3e:0a:e0:
c7:d9:4f:00:c0:8d:98:d4:b6:0d:90:73:ac:f8:62:
08:3c:23:d0:94:2c:97:79:8c:2e:f6:67:66:a4:ab:
2b:c0:9b:bc:36:25:4d:94:6b:d1:e5:b3:73:2e:77:
2f:78:7d:7e:32:8e:98:29:f4:3b:24:15:cb:73:88:
d1:9d:5c:24:5d:91:78:6c:9d:47:db:84:38:11:aa:
de:00:b1:6a:8a:77:75:82:05:1f:a7:e9:73:58:96:
5d:0d:4a:04:6f:f8:74:1b:46:df:00:54:75:65:a3:
eb:7b:3d:46:64:13:31:d8:ff:07:d8:cd:31:ea:7f:
ec:2c:00:7d:3c:04:c6:b8:d4:92:d8:76:08:9c:31:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EA:EC:1F:F2:F5:68:60:A7:66:49:3C:4C:A0:65:E8:EB:88:17:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
209.173.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:59:9e:4d:86:53:1e:b0:41:bc:ea:fd:70:d1:7f:a4:1c:2b:
e8:eb:17:44:af:0a:98:ff:50:6e:59:47:1e:02:1e:64:eb:4f:
04:36:fd:43:fa:e3:a0:56:2e:0a:c1:ca:95:e2:b6:e8:3e:c8:
88:71:cc:aa:33:cd:6f:5b:63:36:bf:87:a1:31:c8:64:a8:5a:
2e:e8:31:ce:7e:81:de:50:74:e7:38:89:d2:c9:b9:72:fb:ff:
2c:a9:b4:34:91:c5:e4:40:26:82:f3:ae:c8:44:56:51:e1:0f:
6f:a8:72:50:b8:4c:53:aa:33:90:3c:94:b6:02:e3:01:7c:fc:
87:62:f0:2f:29:34:05:8d:f8:ce:a4:d0:60:f3:68:5d:22:70:
81:d9:6b:1d:8e:a3:3a:5c:4c:bd:13:49:ab:48:f8:c8:0b:a3:
93:58:1e:25:15:9d:05:5e:0d:6e:5f:34:7e:1b:9b:9d:78:8d:
37:55:73:81:34:e1:a5:a8:40:10:e1:62:2d:ca:94:45:a4:85:
8e:b5:c1:ca:8b:17:3d:d4:ee:bb:9a:86:26:03:f1:af:0d:91:
1a:0e:c4:94:cb:02:c5:c5:7f:ec:cd:8f:f2:f0:c6:85:68:be:
3b:1d:79:ac:7c:11:ad:01:3f:83:6d:ca:a3:29:70:a8:0f:d1:
84:12:a0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:10 2025 by rpki-client