Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa
File: cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa (raw, json)
Hash identifier: 5MiwZtsv+TXeyOo47pKd2PDh42LWpzSFuZB0pB66rKk=
Subject key identifier: FD:3E:E2:62:37:BF:D3:49:07:09:63:85:4F:14:2E:7A:B7:D1:9B:1E
Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial: 010D0C9F432858483B50093C413DE2DD1406A820
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 6461
IP address blocks: 209.183.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:09:3c:41:3d:e2:dd:14:06:a8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=cb3828bc-1544-465f-914a-cb1145c8c22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2a:c3:6b:8d:85:1a:87:42:ff:53:36:db:66:
e1:d2:e8:7a:75:e9:af:de:12:94:e2:7f:fc:54:1a:
da:17:52:7c:9c:5f:68:ab:36:60:05:53:f6:57:bc:
c8:d2:b4:d2:95:fb:41:61:0d:11:43:e5:d2:98:12:
0c:4a:06:75:ec:56:64:75:e2:59:01:21:8d:71:a3:
31:32:68:f6:3d:6f:2a:03:77:74:ad:d0:b3:09:f4:
2f:f4:3d:f6:48:e9:a6:c0:04:ab:f0:fa:32:53:77:
b2:4c:91:e1:53:5a:13:cc:8f:fb:c2:aa:e8:bc:38:
2f:d1:e3:fd:80:f9:f9:ec:1c:9c:b7:05:4d:4b:46:
7c:ad:32:2d:71:23:c3:5d:3a:2c:0a:34:11:c2:3e:
ca:70:5b:f4:14:d8:ff:af:62:73:7a:d3:3d:4e:c5:
28:fd:5b:57:c7:22:24:84:21:da:2e:67:70:c2:81:
26:69:40:69:4c:f4:00:8a:c0:5d:93:5e:1a:64:19:
08:4a:20:b6:63:b1:06:41:0f:44:9f:29:13:fa:1c:
a9:ec:67:c4:bd:16:59:63:eb:63:c8:52:62:b1:f8:
a7:12:0a:1b:d9:3b:45:6b:4e:86:aa:85:bc:f9:7a:
25:f1:6e:df:38:51:8e:8b:76:1c:06:68:14:2e:f0:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3E:E2:62:37:BF:D3:49:07:09:63:85:4F:14:2E:7A:B7:D1:9B:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
X509v3 Authority Key Identifier:
keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.183.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:d6:e1:09:d2:73:89:bf:c7:89:78:99:f0:59:50:bd:52:ca:
19:87:8d:94:98:f4:70:c2:d1:55:3b:3c:99:6f:9a:1f:fe:bd:
8d:9f:b4:9f:a1:31:2b:99:02:d6:bd:b1:e5:f5:73:5d:ee:d5:
72:95:d3:73:b2:ec:30:7d:cd:87:f6:96:c8:c0:9f:f7:41:80:
ad:76:1e:c3:80:33:93:0d:7e:0e:b5:b6:eb:b3:71:9d:21:8a:
b1:72:a3:ae:53:de:f3:81:db:9e:8f:32:db:dc:ad:8a:f6:89:
a8:c1:d7:6a:0e:f1:d2:a9:9b:81:00:d4:29:b9:fe:bf:a7:d3:
c4:8a:02:c1:21:d1:53:0e:c4:ca:02:03:07:ec:81:3a:bf:8e:
c1:1b:4e:21:03:4e:d6:dd:13:c1:47:10:da:15:11:d3:45:0c:
65:13:bb:bf:5b:77:a9:20:4b:cf:64:53:9c:60:a1:85:61:cd:
17:5e:2d:da:0e:d4:42:b8:77:71:c7:77:b7:57:9f:fd:be:95:
ce:bc:7f:2d:27:e7:aa:d8:52:85:5a:4e:59:8c:41:31:6a:18:
16:bb:4d:6f:4d:bf:ff:19:89:c8:8a:f1:57:07:27:83:f7:1f:
8c:64:e1:f3:26:e7:fa:84:1d:51:a2:b1:77:58:79:34:e7:a2:
72:0a:89:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:30 2025 by rpki-client