Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f7f99ef-9928-3c17-bf5c-cccc95a09fe8.roa
File: 0f7f99ef-9928-3c17-bf5c-cccc95a09fe8.roa (raw, json)
Hash identifier: aeZbEdQAxLYkyYLgfyoFdcoxN7hk1W1U92d9T4XT2VA=
Subject key identifier: EB:7F:D9:D9:1E:94:6C:C6:CA:58:94:0A:57:25:CF:9E:D6:F1:A5:68
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285847F1550A97197A313BB996F200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f7f99ef-9928-3c17-bf5c-cccc95a09fe8.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 7029
IP address blocks: 209.252.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:55:0a:97:19:7a:31:3b:b9:96:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=fd36b2ad-7baa-46d6-903f-77d9a4aad921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:d1:18:da:22:df:36:ac:a3:fe:63:0c:f6:
fd:6c:5d:0e:2d:10:88:9e:87:b5:a7:ca:31:ff:01:
3f:03:15:a8:a9:b5:8d:46:89:08:cd:93:4c:76:d7:
9f:c4:a0:04:92:c9:81:20:9a:31:a3:64:55:45:4b:
cb:7e:43:ea:78:d6:22:d6:53:c1:6e:f1:34:9c:47:
f1:41:63:af:c2:77:a6:44:98:76:6b:c1:ed:dc:f9:
12:7c:1a:57:03:b4:fa:f1:dd:65:38:d2:c3:6c:32:
dd:79:63:11:cd:fd:f9:b1:c0:28:5e:31:41:95:4b:
11:d6:cf:22:d4:e3:62:b6:9c:56:a7:18:2c:58:40:
99:0f:e1:8c:f3:3b:11:83:e0:f3:03:05:8e:77:5a:
95:86:74:1a:be:63:ec:76:98:2f:c5:50:57:c2:04:
51:15:5e:34:77:a7:04:3b:9e:21:55:8f:b9:f1:b0:
f4:8f:4c:65:23:e0:d7:b4:4f:b5:e7:fd:6f:f6:7b:
c0:91:dc:f9:52:30:0a:75:a1:de:46:3f:36:20:aa:
73:3e:4b:93:4b:59:17:f6:0a:b6:9e:07:06:1f:59:
d8:1e:64:ee:a9:2d:e0:bf:9e:e5:34:65:6f:6e:c5:
54:29:b1:87:fc:92:70:10:4e:99:e7:be:51:79:32:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7F:D9:D9:1E:94:6C:C6:CA:58:94:0A:57:25:CF:9E:D6:F1:A5:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f7f99ef-9928-3c17-bf5c-cccc95a09fe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.252.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:c0:f8:04:30:fc:a4:2f:4c:eb:b5:a5:de:be:65:4f:e7:f2:
f0:01:b9:6d:cc:9a:61:ab:dd:42:7c:89:50:0d:7c:7b:59:d2:
1a:ec:e3:2a:2b:ab:82:01:a3:d9:a4:0e:be:ef:9f:98:79:a6:
51:16:96:5a:e7:45:c7:27:97:54:37:f4:18:af:c1:66:bd:20:
a1:a4:39:9a:fc:dd:ef:af:ea:fa:d5:a0:ef:08:c2:ba:bf:db:
de:54:0b:bd:09:7c:ce:38:78:50:bf:e6:ff:cb:ad:04:18:17:
12:26:f6:ed:4b:51:f3:01:bd:13:cf:1b:af:a1:f0:9c:cc:d5:
11:4b:fe:c8:07:a5:13:a4:63:a0:3e:81:83:e3:63:4b:27:c1:
64:26:03:31:e3:91:b9:2a:56:cb:8e:de:8e:d8:a6:7f:ca:69:
39:b4:70:9e:b4:1a:44:1a:b2:ae:3d:7b:6a:fa:be:b8:2e:dd:
8a:6c:01:56:54:b4:e4:f5:f4:89:bc:5e:0a:76:23:cb:f9:e3:
2b:fb:99:a7:bf:86:9f:13:4d:d0:44:11:fc:ed:65:aa:24:d1:
b4:9e:6e:f2:fc:f6:fd:56:58:1b:d1:2f:13:89:31:72:a3:d4:
79:13:ef:18:23:25:f0:9f:90:c8:dd:6d:bf:7a:c2:6f:eb:48:
cc:31:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:43 2025 by rpki-client