Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/6f6c5775-f8c6-34cc-9d55-8e4694d5be7f.roa
File: 6f6c5775-f8c6-34cc-9d55-8e4694d5be7f.roa (raw, json)
Hash identifier: eHPa4V63rGnOuQ90/6x+neiTrei5qLoMdiohVFqN+k0=
Subject key identifier: 61:15:14:32:08:60:15:2A:42:C9:7C:19:47:69:A0:E7:7E:42:8B:C6
Certificate issuer: /CN=78a2f9a6-28a7-4fb5-ba32-6f4af07c0026
Certificate serial: 010D0C9F432858487755DC41D46F41F4597E7480
Authority key identifier: 37:A8:04:0E:9F:D2:37:72:00:94:6E:60:47:99:1C:96:40:CC:49:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/6f6c5775-f8c6-34cc-9d55-8e4694d5be7f.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 398894
IP address blocks: 209.142.115.0/24 maxlen: 24
2620:98:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:dc:41:d4:6f:41:f4:59:7e:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a2f9a6-28a7-4fb5-ba32-6f4af07c0026
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=d3663c4c-6f4c-4961-905c-7b7d7bf21ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:a2:55:a5:4d:3e:38:57:a5:44:ec:01:6a:
41:56:1b:25:db:c5:47:c1:2c:2e:6c:1c:77:8e:77:
d7:cb:fd:7c:bb:8b:d5:6c:c6:c2:7d:59:b6:52:1a:
5a:31:16:12:2a:0c:6a:2f:e4:99:36:e9:40:d1:9f:
a5:e7:d3:ab:e5:5b:fd:30:77:6f:3e:50:a5:2c:91:
7d:66:87:a5:e3:26:28:48:d0:82:f2:cd:bc:48:f9:
68:4b:b3:84:1d:78:47:4e:e6:ab:d5:b1:48:0a:0d:
24:26:ce:2a:46:04:dd:ab:bf:8a:fd:f1:ea:3f:0d:
c1:0e:c3:44:87:f9:32:70:e7:8b:89:fb:21:08:32:
02:05:8a:cf:f2:67:a7:40:ca:f1:ef:98:9d:e9:c7:
20:69:76:7c:01:af:6a:cc:00:cf:bb:7f:a5:e2:01:
39:5c:9e:84:2d:29:ff:9f:40:b3:dd:dc:24:a3:3d:
2d:26:34:ee:e5:82:8f:a6:d9:e4:3b:97:e0:ef:49:
f6:6a:c7:30:85:4f:1e:c9:e5:29:09:c1:af:a2:63:
0c:62:1c:15:fc:14:45:4e:17:b5:e4:04:99:f1:64:
2a:33:d5:e4:3f:83:31:5e:64:99:b0:8d:9f:df:89:
e8:70:92:bf:84:96:9c:8c:f6:03:7d:11:07:41:c2:
5b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:15:14:32:08:60:15:2A:42:C9:7C:19:47:69:A0:E7:7E:42:8B:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/6f6c5775-f8c6-34cc-9d55-8e4694d5be7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.crl
X509v3 Authority Key Identifier:
keyid:37:A8:04:0E:9F:D2:37:72:00:94:6E:60:47:99:1C:96:40:CC:49:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.cer
sbgp-ipAddrBlock: critical
IPv4:
209.142.115.0/24
IPv6:
2620:98:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:de:d8:b2:a3:07:ba:f4:64:fd:62:32:0d:68:58:5c:c7:a8:
7a:dd:2b:de:f2:d9:75:36:2f:16:07:3a:41:68:72:71:bd:79:
7e:98:b5:89:14:bb:59:43:7b:5e:09:59:59:78:38:b9:00:5a:
a3:0c:2a:55:68:21:75:59:81:a6:13:7b:ca:ff:11:ad:da:8f:
89:79:7c:9a:13:24:87:6c:4f:21:9f:e0:29:ca:e6:15:dc:83:
8c:2a:7b:b4:b3:a7:f2:7b:ca:6b:0c:cc:e2:7e:8e:cc:1e:e7:
e9:f5:91:73:30:b8:c3:6e:1b:0a:4d:5c:23:01:c9:a8:57:99:
90:34:6c:6f:1f:fe:6f:93:7f:2a:bb:b1:20:f9:86:33:4b:e0:
4e:96:5e:80:e0:8d:d4:e3:19:47:77:e6:34:fc:19:64:e9:15:
44:2f:0b:99:ce:d7:48:6d:65:a3:8b:c4:83:25:f9:da:cf:be:
2f:d6:ae:1a:13:89:57:d6:e0:b7:ea:74:0e:7a:00:23:be:ca:
b1:37:27:78:33:a1:ed:ff:7c:a3:93:40:3c:f7:85:df:40:a2:
fa:4a:93:d6:20:e0:24:51:0a:aa:69:7e:72:27:bb:0d:73:a6:
53:c6:33:68:e3:62:dc:3c:9d:22:4f:84:a6:96:b2:3d:ae:4c:
eb:ca:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:17:37 2025 by rpki-client