Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a77814a-3c28-3da2-ac94-b7c6e1e40527.roa
File: 0a77814a-3c28-3da2-ac94-b7c6e1e40527.roa (raw, json)
Hash identifier: z4e5voDQaWQls20e6FHE/zr0fo8gShcCdgJanu+MkYc=
Subject key identifier: FD:A4:D6:C3:81:A5:CE:D4:9E:0A:3C:C0:E0:95:F8:F4:8E:5F:6D:A2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F15516BFCEF49875B35436B0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a77814a-3c28-3da2-ac94-b7c6e1e40527.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 36471
IP address blocks: 209.255.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:16:bf:ce:f4:98:75:b3:54:36:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=442cf7bb-95ff-447d-8935-3b7ac6b060e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:76:9f:01:c6:7c:89:77:51:8d:09:4d:24:
80:da:b0:0b:7d:7b:a1:db:d8:d3:75:25:69:6f:25:
d6:2a:64:80:eb:7b:fa:b1:ad:9f:00:ee:f1:b9:8b:
63:1a:91:13:01:a3:8b:91:9e:44:0e:28:d3:10:99:
43:d4:32:89:79:66:2b:09:46:d8:a5:bd:9d:ed:ae:
4e:33:38:34:f8:90:59:4a:a5:33:05:01:3f:1f:27:
f5:c9:19:96:e1:1c:a2:ce:e1:10:b4:ed:7a:b2:34:
68:db:d8:52:14:aa:96:7c:f5:0a:9a:74:f1:cb:e2:
97:66:d0:74:5c:97:19:4a:cc:72:e8:d4:64:63:0f:
35:19:b4:31:03:48:c5:8d:03:ff:46:fd:91:e6:e8:
c1:e3:99:93:c4:42:15:89:bc:a9:a6:c5:0d:bc:c7:
31:9e:6e:9a:23:b6:bd:f4:8e:a6:56:81:67:32:b6:
3e:20:1f:45:fb:d7:60:88:ae:1b:1b:08:cc:1a:fc:
ab:3b:9e:01:ff:63:cf:fc:02:1e:ec:3d:70:5d:89:
72:b9:73:46:8f:55:77:b9:47:77:a1:57:07:20:58:
bc:21:7d:95:51:43:94:00:3d:c7:12:6b:0b:b8:1c:
c6:95:65:b5:1f:9d:a3:9e:0b:c5:fd:ef:6d:7a:2d:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A4:D6:C3:81:A5:CE:D4:9E:0A:3C:C0:E0:95:F8:F4:8E:5F:6D:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a77814a-3c28-3da2-ac94-b7c6e1e40527.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.255.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:40:c9:98:7e:43:5b:cc:80:8e:3f:82:22:0f:fd:46:b4:a2:
f0:12:32:e4:39:ba:e8:ee:95:52:6a:7c:e5:53:6f:3e:8b:22:
bb:55:43:d2:9f:3c:bf:e9:a3:a2:80:c1:4b:55:4b:0b:d0:93:
4e:00:9f:dd:da:68:29:dd:79:55:fb:01:d6:8f:df:5a:c7:f0:
f1:26:e2:d8:05:f8:97:26:1f:85:0c:17:84:66:2f:e8:95:c1:
eb:77:e2:5b:85:09:48:95:a8:66:a4:be:a5:ff:ae:b9:6e:e5:
7f:a1:cc:99:24:f1:5d:be:b0:05:62:86:c6:5e:05:4b:e4:d0:
7d:10:83:8c:8f:4d:98:1a:d5:e0:46:49:d9:41:c4:f1:dc:1e:
33:1e:5d:54:bd:1e:10:2b:3f:14:30:37:49:43:a0:ef:37:03:
2a:c8:64:e6:70:f7:15:24:e0:41:4e:34:20:d7:22:1a:50:a7:
ed:1a:e2:ba:3f:9c:ff:a7:91:c3:ac:36:97:b0:91:cc:46:62:
24:64:48:d7:43:9f:2a:ee:85:36:34:5a:79:e0:70:ee:e0:22:
51:7b:b6:a3:6c:f1:a2:23:92:54:ec:ae:df:a1:d9:34:bb:4d:
53:a0:c9:df:57:fb:06:ed:30:1f:74:9c:ea:b3:e3:43:dc:ea:
41:0d:7d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:28 2025 by rpki-client