Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa
File: 2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa (raw, json)
Hash identifier: wASZ7/lAbPXYVQ0uwNjxFOQy3mdyD/egqbQpfxnshIg=
Subject key identifier: AB:20:91:0C:44:CF:E5:6A:4F:5F:42:77:7B:DC:41:D2:A8:A2:5E:96
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F43285848696069E5DA90BE588F8F6100
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 398202
IP address blocks: 209.178.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:69:e5:da:90:be:58:8f:8f:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=324f3730-6861-4e11-9043-b86da8946425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:11:13:83:56:04:9a:91:6c:d0:d7:fc:9d:
63:ec:1f:f8:19:dd:e7:c8:fc:92:1c:ca:d0:3f:3c:
9d:04:c3:6e:c1:f1:81:72:7e:08:0f:b3:ea:82:18:
f7:e0:74:fe:7a:b7:6a:64:8f:d4:a4:e6:c7:58:d3:
2a:41:aa:06:b1:e6:25:a9:fd:20:de:67:5c:d9:b0:
25:73:7c:84:ee:f3:84:db:a2:49:af:c6:5f:f6:85:
cb:13:f6:ec:06:4c:a3:94:9d:1a:47:a8:1d:c0:f1:
99:51:32:cc:eb:44:39:66:28:5a:9d:5f:08:05:dc:
33:2f:f9:6e:85:c7:5c:bb:fa:7d:1f:db:b8:8c:06:
39:01:fe:fb:ba:be:d1:32:0b:0d:9c:5c:46:97:34:
f6:41:dc:4d:92:11:1e:5f:95:9e:d3:86:b3:dd:a5:
a9:e3:19:af:f9:8f:11:b4:07:6b:92:8a:28:14:05:
57:c4:20:4b:c2:65:76:57:ea:bb:1c:a5:ec:b6:e2:
5b:ca:3f:f0:e3:31:8a:e2:da:85:23:56:6f:31:9d:
9e:83:62:e7:e0:5a:7f:a8:ae:58:cb:a6:01:b6:da:
6a:2a:35:a6:08:fa:37:9a:35:ce:a3:14:53:a3:cb:
fe:11:77:52:56:f5:2d:6d:08:99:0d:80:4b:20:9e:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:20:91:0C:44:CF:E5:6A:4F:5F:42:77:7B:DC:41:D2:A8:A2:5E:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:03:8a:f5:af:b6:ae:a7:35:aa:3a:8c:fc:14:cf:87:7e:90:
9f:81:e4:d3:90:a5:9c:50:4b:39:00:11:3f:73:6c:18:17:8d:
57:0d:f5:3e:5d:da:83:19:68:d5:f5:16:47:e6:6e:97:ec:6c:
07:6f:e7:c8:9f:64:48:ec:7b:d6:85:25:07:ab:aa:e6:6d:1f:
c6:4a:a4:c8:29:79:0c:bf:14:aa:50:a3:a1:4a:fb:73:02:1e:
fa:b9:ed:d6:07:52:e0:75:19:fa:62:97:3a:f8:be:66:bf:26:
10:2b:98:f5:98:21:ab:2f:b5:8c:cd:a2:e8:6e:99:19:bc:01:
f5:6b:4e:53:5a:87:5d:46:b6:03:79:f0:e8:ce:b1:1e:30:44:
7e:7d:66:5a:a1:f2:16:a3:65:d1:3c:9f:b0:74:d7:e0:b8:d1:
4a:cd:be:1c:00:68:00:ed:7c:71:52:6c:3f:33:4a:ba:51:65:
f7:03:6a:74:4d:9e:b5:be:77:b7:37:17:e2:84:15:08:21:26:
a4:63:d1:1f:6b:95:25:57:15:35:ac:ed:e5:0c:4f:a6:c2:75:
dc:a1:d2:7b:ab:e7:c9:6b:a5:18:45:6b:4e:05:c2:48:ba:6e:
81:be:bd:fe:f5:47:a9:68:c7:48:ec:eb:91:28:4d:65:ed:55:
8a:bd:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:16 2025 by rpki-client