Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/7eef53f2-a70a-3de5-87e9-3cbc6bcc740d.roa
File: 7eef53f2-a70a-3de5-87e9-3cbc6bcc740d.roa (raw, json)
Hash identifier: FK9GuFkv7L5vFdqpD7ZO9FWjdqUsyp/lc4LfXFCPpuE=
Subject key identifier: 8D:77:A1:F4:BC:B6:5D:CC:1A:26:B3:8B:EB:04:FA:A7:B4:35:96:4F
Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a
Certificate serial: 010D0C9F43285848897B2036D3E987329791EB80
Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/7eef53f2-a70a-3de5-87e9-3cbc6bcc740d.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 11739
IP address blocks: 209.20.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:20:36:d3:e9:87:32:97:91:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=3d5c71ca-a7d8-4bfa-bfd6-dd14d62106cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6b:c9:76:11:3c:a4:6d:d9:c7:13:64:bc:66:
22:0f:18:6b:aa:b6:6c:69:6e:22:bc:9d:5f:30:6c:
3d:01:70:e9:14:2c:47:30:b0:3e:f1:05:b2:8f:77:
a9:44:74:a8:8f:e8:a5:62:79:4b:23:bf:59:ac:5c:
7f:94:2e:5f:2b:e7:e8:98:30:b6:49:d2:eb:4d:d7:
59:d2:7b:1b:65:1d:ed:c8:f7:8c:94:f5:06:bc:0d:
23:17:86:7b:3a:f6:f4:44:af:61:c3:d7:91:6a:7b:
96:0d:13:8a:7d:60:b3:24:59:ab:7c:b9:a7:31:50:
bf:c3:1b:e1:61:29:f6:8c:1a:ca:c2:97:3f:3e:f9:
bb:23:74:93:c2:14:c7:53:86:56:77:84:54:60:43:
c8:cc:4d:cb:44:ba:62:e5:e3:db:0c:b6:ec:07:b5:
65:a7:1e:b7:39:56:cd:cc:37:17:ce:99:56:39:27:
47:ff:34:43:1d:e8:06:15:7b:12:6c:17:7a:92:58:
94:65:b5:7c:67:14:05:2f:56:7e:2c:7a:29:f4:a4:
59:b0:7a:f1:11:cf:56:76:38:10:dd:c4:96:0b:4d:
19:ae:e4:5f:34:a0:ea:d2:01:b3:c5:ea:3b:86:84:
23:14:6a:e3:ce:f4:fd:f6:2e:b1:27:ad:71:eb:1c:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:77:A1:F4:BC:B6:5D:CC:1A:26:B3:8B:EB:04:FA:A7:B4:35:96:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/7eef53f2-a70a-3de5-87e9-3cbc6bcc740d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl
X509v3 Authority Key Identifier:
keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.20.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:b1:16:8e:1e:64:b1:d5:f8:5c:4e:ac:30:40:4c:c6:d7:c0:
e5:f5:6a:98:53:5b:e5:d5:8a:1e:a1:cd:e0:15:03:b0:37:0b:
c4:3e:55:ae:6a:9f:8e:8e:fe:67:a6:2e:72:9d:96:7f:c4:f2:
f2:ee:c2:e9:89:db:5d:c2:0b:8c:74:0f:0c:f0:b5:2c:90:a3:
1d:fc:c4:46:ac:4f:87:27:bf:93:14:f0:2c:06:96:e2:08:e6:
4e:53:ca:00:a5:1a:7a:18:26:46:d5:cb:5e:6e:85:7f:98:78:
b2:00:3d:3e:ef:9a:fe:fd:6e:63:b2:7c:c8:ff:92:e8:8d:61:
da:f5:43:04:bf:e7:6d:eb:fa:4f:6f:68:27:9f:ea:bd:33:1a:
b0:a0:c7:45:25:17:38:6e:d9:fe:1c:a7:4a:83:e5:81:f7:97:
73:cc:e6:e6:41:ea:69:60:97:ff:b2:15:7f:b2:69:5d:0d:1e:
8f:2a:01:f4:31:2d:9f:a2:b2:d0:25:dd:f1:83:fe:3a:3d:83:
49:d5:89:ac:93:8f:4b:5d:65:87:47:c8:c5:77:34:4e:d5:aa:
93:40:ce:46:b7:b3:08:7a:08:ab:0f:04:b4:2b:0a:d0:11:1e:
83:a4:25:3b:96:42:e6:58:26:82:14:9c:95:b7:bb:10:f9:a4:
a8:bd:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:18 2025 by rpki-client