Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/00b01dba-4f97-312a-adb6-75a618308d1a.roa
File: 00b01dba-4f97-312a-adb6-75a618308d1a.roa (raw, json)
Hash identifier: XuMo8R6pbFFkuCER9dOcZDDUHlhFtKfGm3AUV+GQ0e0=
Subject key identifier: 09:78:C2:92:A3:4D:EE:83:2C:6C:57:3D:0B:C0:08:E3:EE:9D:31:29
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848265FFA408C529E90DBCAC280
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/00b01dba-4f97-312a-adb6-75a618308d1a.roa
Signing time: Mon 09 Dec 2024 14:00:51 +0000
ROA not before: Mon 09 Dec 2024 14:00:51 +0000
ROA not after: Sun 09 Mar 2025 13:00:51 +0000
asID: 63442
IP address blocks: 209.249.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:5f:fa:40:8c:52:9e:90:db:ca:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 9 14:00:51 2024 GMT
Not After : Mar 9 13:00:51 2025 GMT
Subject: CN=3a20b663-5302-4293-bca5-014d8d950338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:ae:95:91:45:86:01:f6:21:49:99:91:e0:
26:14:2b:11:c9:c2:71:d2:0a:82:16:3d:27:1c:1b:
19:b9:a1:fb:c7:f8:d2:d5:94:7d:70:9a:df:f7:58:
7e:7d:47:f1:73:ea:c7:5d:40:a1:7a:48:26:49:a0:
11:00:c8:3c:a9:1a:96:58:4a:20:5e:9d:77:44:aa:
77:1a:e2:67:33:f0:df:5a:17:2a:c9:06:d1:20:88:
37:e1:1a:2c:40:e5:8a:db:ec:76:ea:0b:8d:1d:f7:
24:ad:3b:1e:d2:3c:20:92:e3:37:ef:e2:e8:4c:6a:
27:c9:5f:92:55:b4:3b:7a:6d:5e:8b:f7:5f:bf:62:
90:56:93:af:45:70:f7:d4:97:9d:27:6b:b7:61:30:
77:5f:1b:da:79:e3:5f:35:c6:70:2f:b7:c8:fc:f4:
31:98:7b:43:1d:22:a0:1f:63:9b:7b:bc:9f:ee:1e:
3a:ae:76:e2:8b:b7:60:9e:bd:31:fc:6e:96:c6:76:
15:20:9c:9c:41:c3:10:a9:fd:e3:45:2a:0e:f8:31:
f1:8c:63:4b:22:6b:45:55:38:e2:e0:3b:29:bf:24:
6a:fc:be:81:40:0c:80:63:37:4d:e4:8e:bf:95:1b:
0e:7c:5b:f3:99:c6:a4:d6:51:4a:31:00:6f:e0:25:
d0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:C2:92:A3:4D:EE:83:2C:6C:57:3D:0B:C0:08:E3:EE:9D:31:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/00b01dba-4f97-312a-adb6-75a618308d1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.249.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:b4:c6:1c:f6:4d:7b:ec:f9:46:1b:5b:5a:a2:10:4f:8b:53:
37:89:22:e3:35:ef:08:e3:b9:41:97:13:12:25:fc:78:08:b2:
ab:67:cf:bc:c0:75:10:68:f4:5d:c4:b5:f5:45:9f:38:4f:03:
c2:be:62:57:e0:2e:35:23:1d:a1:bc:e0:f4:d3:9d:8b:d3:b8:
bd:ed:3a:2c:50:5d:7f:2e:b6:92:2e:8b:f6:ee:f5:d5:d6:90:
e0:ff:0c:da:8d:d1:50:bd:6e:0a:8a:8f:45:23:39:f0:3a:8e:
12:e6:59:6b:ab:3e:27:ef:12:35:7a:89:6e:f4:3f:5a:ae:58:
10:cb:ab:b4:ac:0d:66:b4:7d:f5:3d:c2:e8:2e:be:89:0d:8a:
08:ef:02:4b:21:7c:11:cc:0d:b2:3f:6c:cb:ae:b1:51:01:32:
2b:f2:1d:34:c8:74:32:69:95:79:7d:64:cd:9f:eb:ce:9a:f3:
9f:c8:9a:37:bc:b5:21:b6:d1:6b:db:f4:47:d4:5c:e3:f1:34:
78:1c:11:70:05:62:3b:85:41:d0:9b:5c:b1:65:f5:5a:1a:8b:
2b:ea:55:6d:37:ff:fc:63:6f:d5:f0:ec:4f:56:9d:2b:bc:6c:
d5:57:44:5d:cb:3f:ba:e5:f4:6c:cc:d1:50:07:1f:f7:3f:d7:
f4:fe:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:38:36 2025 by rpki-client