Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7e4f1743-bfb4-3859-a33c-c49d8a34be0a.roa
File: 7e4f1743-bfb4-3859-a33c-c49d8a34be0a.roa (raw, json)
Hash identifier: c00z14DSrHUY/hvvlZTX2L5MWj3ck8dwWdpf/6Lks8g=
Subject key identifier: 20:A6:C5:93:ED:1D:1E:40:58:A3:B6:A3:F5:44:BD:58:1B:2B:54:17
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858486D904D39DC5071457737D2C0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7e4f1743-bfb4-3859-a33c-c49d8a34be0a.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 13414
IP address blocks: 209.237.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4d:39:dc:50:71:45:77:37:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=60f1444a-7357-4ee9-a901-90f132f0e198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:21:af:36:e7:47:ac:34:b5:5b:ac:48:fc:
c9:41:37:1e:cd:a7:cd:92:07:e2:8d:59:cd:3c:c9:
9d:88:83:fd:db:27:59:3c:f0:a5:d4:13:f5:e1:c3:
20:f3:47:6d:25:61:fd:0e:dc:d1:98:94:d8:48:15:
f5:63:7a:a1:9b:14:35:92:f7:00:3e:d8:00:7e:1f:
c0:24:3e:a5:a7:5a:b9:7b:32:3f:3f:3e:17:91:5f:
5c:9c:01:16:c9:c1:83:15:8f:bd:1b:03:26:8d:7c:
a4:0d:3e:03:66:c2:63:91:ba:16:70:2d:b1:36:5d:
0b:13:b5:2d:b4:65:03:a8:0e:52:54:68:62:36:ee:
e6:7b:24:4f:31:ce:d7:c7:6a:6b:ac:c6:f5:9f:79:
4b:15:f7:29:4f:21:fb:19:ab:cf:a8:35:a5:ae:1c:
7e:1b:e7:a9:63:d4:a9:d5:63:b6:d7:65:2d:a9:8e:
5f:2f:a5:de:a9:a6:0c:8d:6e:21:fa:df:e6:93:47:
24:31:c0:58:ab:a1:95:f4:d6:f3:21:0a:9a:59:3b:
b6:2b:95:48:1a:b5:57:47:d8:90:ca:8c:65:47:f2:
02:9f:18:8e:89:56:77:cf:42:3e:90:f9:bf:98:3e:
9d:31:06:70:92:00:c5:fe:c1:98:69:b5:fa:0f:ba:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A6:C5:93:ED:1D:1E:40:58:A3:B6:A3:F5:44:BD:58:1B:2B:54:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7e4f1743-bfb4-3859-a33c-c49d8a34be0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:47:ae:9b:9c:50:25:39:32:09:8a:e2:05:f4:e9:80:24:12:
6b:0a:10:dd:ee:e2:02:bf:b9:d8:85:1f:69:26:f0:86:69:28:
4a:6f:16:63:f7:a2:6b:95:59:7d:a1:2c:3f:90:d0:89:30:19:
7c:2f:1d:d4:65:31:f4:63:3a:b4:b7:4a:ca:4c:f5:c8:26:b7:
ff:9a:c8:5a:70:e3:40:90:5d:68:e6:53:c3:d0:0b:ac:a9:01:
b9:fc:75:98:d0:70:13:fd:a5:11:51:90:3c:b4:7c:8a:c7:be:
a9:7b:3d:4d:ea:71:95:fd:9a:ce:46:5c:92:db:58:78:8f:09:
1d:b4:92:ca:6a:17:b1:73:a5:97:fb:47:a4:71:a9:59:bc:5e:
28:6b:db:58:1b:29:61:ac:b5:2f:fd:a8:9d:a2:66:b2:5a:19:
da:f7:e3:fa:e4:ea:df:46:3b:45:29:45:8d:94:5f:da:6c:c8:
f8:15:6f:07:aa:f7:8e:98:9a:d0:f9:5c:51:87:7a:56:3c:9a:
11:20:c3:5f:40:ea:9c:7b:df:30:99:67:2d:79:e8:82:dc:6b:
ec:21:65:3a:ac:d2:62:74:ec:09:ce:b9:83:16:7d:e2:55:5c:
c6:7c:ef:29:53:0c:f1:18:cf:9f:b7:2f:f1:e4:81:64:aa:a9:
e9:2d:fb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:54:07 2025 by rpki-client