Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa
File: f7690f1e-c39d-30e1-9d78-56741c6780a0.roa (raw, json)
Hash identifier: RnZA/3EbFtvhkeM2lQi31Ae7gKgKyJb3DgeUzjl5DW4=
Subject key identifier: CD:3C:D7:94:DE:7C:85:3E:F8:DD:BD:79:F1:41:25:7E:B2:71:C9:49
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584878BB0722687F3F577D9B3280
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 209.169.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:07:22:68:7f:3f:57:7d:9b:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=899a93ef-4873-4b00-90af-d96e00955dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:f1:54:ff:be:1c:fb:8b:64:d2:70:a6:c4:
65:87:3d:71:67:3b:67:66:24:0c:b8:a2:ba:35:03:
2e:dc:17:00:05:82:fc:26:15:52:7e:75:63:68:82:
f4:48:5c:68:3c:04:54:6e:91:d9:3f:22:89:d2:88:
24:12:d7:a9:44:65:59:5d:0d:1a:af:7e:43:fd:83:
b1:9a:cd:d7:b7:66:cb:b9:06:df:3e:9a:2c:63:7e:
e2:41:fe:d7:4a:8d:b3:20:3d:0d:a4:b1:8a:bd:ae:
3b:da:fe:7b:eb:5d:94:ae:7a:58:5d:0b:0b:1d:6b:
1b:85:e3:c5:1f:ab:99:ed:f0:29:7d:9a:08:2d:f4:
8c:d9:9f:b1:fc:25:cd:d0:a1:cb:71:e7:4d:fa:1a:
ce:b9:14:05:d0:5d:13:ba:e2:0d:9f:04:1f:ae:22:
6b:c9:1d:9f:ef:63:0e:56:3b:bd:3f:a3:cb:22:8c:
6d:ee:dc:4a:2f:50:0e:a7:45:ae:b7:44:08:b1:be:
3a:0e:a6:c2:8d:36:75:d1:54:52:99:9c:10:b3:50:
c5:17:4e:c7:cb:f9:29:f1:b8:0a:7a:64:b0:5a:41:
71:8a:12:41:8a:22:1e:41:c0:b2:2e:de:15:fa:3a:
ae:47:69:c5:c8:12:1c:04:43:ac:9d:92:78:81:50:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3C:D7:94:DE:7C:85:3E:F8:DD:BD:79:F1:41:25:7E:B2:71:C9:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f7690f1e-c39d-30e1-9d78-56741c6780a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
209.169.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:ff:aa:f6:6b:1d:c1:13:4e:d0:f3:05:18:e6:d8:a8:98:63:
40:5d:f2:86:2d:1f:91:9b:d5:00:16:2c:09:f0:c5:ba:99:31:
d4:0a:f6:c5:97:4e:9a:17:cd:f9:b7:8a:4f:de:0e:df:a3:35:
55:ea:ba:78:f7:fa:3c:01:d7:04:fe:0e:47:ba:29:3d:46:c1:
72:32:23:53:43:a4:e3:36:ed:df:95:db:32:fe:9d:19:45:c7:
6a:f4:55:09:59:a4:46:43:39:1f:51:c9:70:d3:7d:53:65:34:
68:36:61:0b:64:f9:07:3c:50:5e:4a:e2:d5:9c:76:83:04:1f:
19:c5:9d:d7:ca:49:b0:6b:01:ff:58:21:38:0b:2a:df:c0:e3:
9a:c1:7b:ec:a9:28:ba:f5:e3:68:bb:35:f1:5b:d0:b2:44:dd:
f6:e1:03:d3:64:8b:d4:8f:ec:c2:f9:5e:1e:5b:94:68:33:31:
61:a1:6d:75:ef:da:60:01:82:34:9f:60:eb:aa:1a:0e:0c:41:
a4:9b:b4:c9:b0:d6:ff:1e:e5:da:0c:71:c1:d1:94:64:c8:19:
4c:b3:b5:6a:21:d7:f0:71:d6:54:d7:71:25:f1:fb:4e:ff:a2:
86:3a:d1:53:fa:4f:a1:8a:28:16:47:ab:4a:4f:0f:a0:37:e4:
70:2f:c8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:04:35 2025 by rpki-client