Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa
File: 9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa (raw, json)
Hash identifier: c7c7ievbuRNPYP8uFtoxKCBPViT+24BHJyBBjaMbw+Q=
Subject key identifier: 07:98:CF:E6:F8:31:F8:05:59:4C:E3:DC:28:1C:82:5B:DF:45:DE:B5
Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial: 010D0C9F432858488AE0A0821EE9485B89C67180
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 25697
IP address blocks: 209.151.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a0:82:1e:e9:48:5b:89:c6:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=7d0d1923-6199-47e6-b684-17d0fd47d73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:50:a3:88:7f:2f:08:8f:d0:d1:97:1b:5a:
95:10:d6:3c:fd:15:7b:7c:f2:8a:86:90:1a:2a:1b:
1f:8b:be:2a:b0:56:16:f3:45:4d:12:8a:43:2e:ca:
d0:61:67:b8:19:5f:71:76:c1:96:dc:1f:ce:29:87:
a5:1d:c4:7f:2b:4a:26:ee:28:f8:4c:37:22:37:26:
64:ee:15:97:1a:56:25:eb:4f:15:24:e7:2d:cd:19:
9c:4e:e4:fc:69:2a:33:b2:97:1b:0f:c9:8d:02:b3:
32:09:5b:9c:57:93:3d:f7:a3:12:8b:d7:7f:0f:e3:
4c:70:24:03:4d:9a:fa:4e:44:d0:71:a0:d3:87:1d:
dd:8c:01:34:5d:70:6e:33:1c:43:46:8a:2f:97:b7:
e8:9a:31:a9:dd:19:e6:fe:63:72:7b:9f:72:4c:2f:
15:78:fe:a6:26:6d:f5:df:91:c7:95:4e:6e:92:20:
7b:e5:8c:a2:3d:f1:2a:fb:a7:31:db:d6:26:23:6e:
d8:fc:07:96:85:de:38:ff:87:63:be:a5:5a:e0:62:
fc:b0:9c:d4:7d:ec:d5:b1:0c:47:44:af:97:e0:81:
11:4a:84:7e:56:ed:11:6f:54:72:03:31:6f:78:e7:
de:b5:fe:95:fc:9e:68:bd:79:c5:8e:81:2c:43:f9:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:CF:E6:F8:31:F8:05:59:4C:E3:DC:28:1C:82:5B:DF:45:DE:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/9acf47ba-8197-3598-98fe-d7544b7c6e6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
X509v3 Authority Key Identifier:
keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:50:65:8b:ba:64:5e:6a:30:70:7b:c5:a8:12:f4:43:74:89:
a7:ff:d4:01:ba:55:1a:6d:30:3c:ec:19:af:80:7c:07:70:48:
fe:26:6f:29:c0:6e:bd:7e:fb:d0:5c:c0:af:2f:01:a5:40:99:
34:c1:07:f9:81:8b:32:00:87:db:67:11:e5:0c:22:e8:65:b9:
10:46:01:c2:9d:c3:94:f0:71:58:49:de:2b:7a:28:2c:ec:12:
f7:dd:19:04:53:a2:76:a2:44:83:f1:7f:5c:10:4b:ae:be:ae:
46:e6:01:31:5b:2a:0a:51:dc:9d:88:89:78:f0:af:54:d0:7b:
4c:38:ed:58:1e:01:07:c6:7a:7d:40:93:17:55:f3:6d:a5:a7:
63:06:ce:b7:b8:46:76:62:e8:cd:50:09:8c:a3:f8:32:d4:60:
dd:1a:7e:8c:b8:0c:2c:d0:39:00:75:50:63:61:5f:18:cc:7e:
c9:0e:22:de:70:af:7f:3a:07:87:9d:57:a6:e4:cc:7e:12:8c:
ed:0b:21:3c:d1:56:c3:0f:09:3d:bd:cc:aa:b6:c5:ae:e0:75:
3d:fd:ea:4f:7a:e6:99:64:9f:db:1c:ad:9e:98:07:1c:b0:02:
e8:26:98:61:a2:a6:5b:d9:19:4d:b5:7a:18:ed:af:8c:a0:d4:
83:5b:56:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:44:50 2025 by rpki-client