Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa
File: a76e2a99-afef-387e-82e9-daf0c2b55c50.roa (raw, json)
Hash identifier: JmBqLDNkQ/Ie/96RCtEnHEnpepXDXIOLF54lJP/R8TE=
Subject key identifier: AE:2D:0A:18:91:9C:9B:17:11:3E:3B:66:26:29:72:E1:50:02:C8:32
Certificate issuer: /CN=83978879-0e89-498f-901b-884a1988c27f
Certificate serial: 010D0C9F43285848424AD01DAB0A5288F9D95900
Authority key identifier: F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 21615
IP address blocks: 209.33.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:d0:1d:ab:0a:52:88:f9:d9:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83978879-0e89-498f-901b-884a1988c27f
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=4df4b359-cc6f-41a0-b025-ec77e0d751ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:44:d8:9e:1e:d3:91:23:16:9c:8f:4f:26:71:
ac:0a:75:58:6a:9f:4e:b7:47:4a:ce:2a:93:e2:68:
c5:a4:b3:8f:b9:9c:f7:6b:b0:88:a0:31:bc:bb:38:
17:e9:8e:27:b0:e5:d1:16:31:a7:f4:e1:e2:47:97:
fe:58:65:24:2a:30:c8:3d:12:e3:f7:a8:3c:8b:68:
bf:ee:3b:4d:0e:85:a4:4c:e4:84:3f:20:2d:1f:6d:
9c:22:8c:fb:69:85:0b:25:d6:a0:a7:5c:48:30:a4:
54:ee:9b:31:26:71:6d:4a:0d:e2:47:80:78:fa:72:
47:75:96:3b:8e:ae:8c:39:4e:06:70:d1:85:27:5b:
22:14:9b:20:2b:10:22:6e:38:99:ff:86:4b:0c:13:
b4:59:c4:3e:66:1c:ce:8a:53:31:45:d4:d3:6f:41:
ff:2c:76:4f:86:dc:2a:8e:c2:4c:27:7c:80:6b:b1:
c9:ad:c0:01:91:1a:05:52:45:d0:9f:b4:9e:04:ed:
9f:7a:91:f6:eb:38:b6:56:05:79:14:16:9b:4b:db:
da:fa:19:12:b7:81:8c:5f:a3:6c:e4:fd:ce:9f:09:
72:e7:7b:3e:22:91:5d:36:cc:c4:17:d5:fb:43:0b:
88:10:a1:f7:13:cf:79:51:55:20:55:7f:41:39:88:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2D:0A:18:91:9C:9B:17:11:3E:3B:66:26:29:72:E1:50:02:C8:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl
X509v3 Authority Key Identifier:
keyid:F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.33.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:84:0b:9d:27:fc:6b:b8:dd:81:77:66:02:21:cd:cc:dc:61:
99:54:36:68:1b:99:1a:ea:20:ba:69:86:57:83:c5:df:ab:56:
30:49:38:eb:8f:16:1b:f2:1f:9f:c2:1a:81:02:f5:07:26:64:
a1:d7:af:7b:ea:c0:53:a5:7f:5a:df:bf:96:ab:ce:34:91:9a:
17:2e:e4:96:34:e8:3f:08:c3:8a:7f:d3:6a:c3:66:2e:75:5c:
2c:75:d0:7c:83:69:56:65:c8:c2:ca:6f:fa:8e:f3:11:94:1e:
58:61:25:72:7c:75:ec:9e:69:07:ae:62:f2:37:5a:96:19:38:
b1:65:f2:3e:19:05:97:60:61:87:20:53:3b:2c:08:28:ec:ae:
50:6a:34:40:4c:8c:0d:ed:db:8b:f2:51:19:ed:5b:e8:97:f0:
7f:f8:f7:7f:75:4e:d6:6e:ce:b8:4f:1d:ee:77:b6:60:c0:56:
9e:7c:2f:db:2d:5c:5b:63:b9:ce:87:10:39:28:86:b2:c8:47:
22:d6:c4:43:fd:27:71:cc:6d:ca:ac:1d:54:80:c6:55:b4:fb:
85:4f:ae:e7:79:d6:27:a8:85:f9:63:47:a0:48:8c:26:d1:ac:
03:b4:24:71:02:22:fc:1e:0a:cc:ba:ce:2c:75:c1:93:5e:c8:
4d:c8:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:44:47 2025 by rpki-client