Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c1ec8178-d440-3ab5-ab9d-cf6515699624.roa
File: c1ec8178-d440-3ab5-ab9d-cf6515699624.roa (raw, json)
Hash identifier: 9fdPaZDBwo5MXvxV70OLQEHeytwKlZv7o3e2Oiqphdc=
Subject key identifier: 18:5F:CC:7E:3F:3A:77:45:F7:C2:53:08:33:62:F2:AE:A3:F0:E8:D4
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584843B009D9A6AA68BCD4CB3000
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c1ec8178-d440-3ab5-ab9d-cf6515699624.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 7018
IP address blocks: 209.163.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:09:d9:a6:aa:68:bc:d4:cb:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=2ebd9565-3c07-4574-a9fe-8afc26e17bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:fa:f8:ff:7f:04:6f:14:b6:f1:2f:e8:26:
51:0d:45:b6:d7:68:7d:7c:69:90:aa:b1:e6:2e:99:
3b:98:7f:53:84:63:15:5e:fb:de:18:0d:dd:92:06:
a8:63:de:e3:37:fa:fb:c5:e2:4c:7e:ef:4f:a6:bc:
fd:e4:59:07:76:24:e6:25:b2:bb:ae:ee:2a:2f:8c:
2a:95:40:0d:bc:3c:9a:1d:74:c1:81:11:2e:b7:4b:
dd:81:98:9d:06:45:eb:6b:ec:f5:73:5f:dd:9e:ea:
62:47:f3:08:3a:f0:de:d3:e6:89:ce:c0:63:15:8e:
d2:dd:88:ce:92:06:97:82:db:d9:ae:49:98:d3:59:
aa:6c:c4:a9:84:f5:58:76:5a:3a:de:bb:32:4c:56:
c7:34:dd:c4:9f:3d:fa:11:28:51:19:33:0d:5d:d5:
15:6f:5a:f9:82:2c:32:db:af:26:18:8d:f0:d5:ea:
72:8d:18:88:6e:92:fc:25:f7:d3:c0:c7:5a:37:ce:
81:a7:a3:26:e6:e2:ff:1f:85:3e:18:33:e1:0e:cb:
f1:e7:04:ee:d2:1b:06:86:17:53:bf:51:1e:1f:d0:
5b:ac:eb:72:37:36:36:dc:2d:88:33:f3:22:4e:d8:
eb:06:83:95:61:11:44:f4:73:03:84:71:ad:96:b8:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5F:CC:7E:3F:3A:77:45:F7:C2:53:08:33:62:F2:AE:A3:F0:E8:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c1ec8178-d440-3ab5-ab9d-cf6515699624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
209.163.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:29:aa:05:63:b3:5f:fb:db:80:0d:86:62:59:5a:af:a1:9f:
a4:7f:28:95:7b:65:2b:57:f1:77:ea:5d:fa:b2:5c:e2:91:02:
f0:c8:d9:fd:6a:68:2a:93:fd:2d:3c:12:c8:61:95:ab:b6:04:
e4:64:57:22:70:d3:30:11:6d:48:03:8d:97:dc:ba:13:d2:ca:
87:ba:ba:37:c6:f9:a1:fc:c9:90:bc:d4:a3:55:af:01:43:a9:
0d:2e:32:8f:ae:1c:c8:05:a1:43:07:11:7f:be:8a:5a:df:ae:
01:bd:b6:ee:4f:19:f0:56:90:ed:70:a3:ee:70:22:58:fa:77:
6a:32:a1:6f:30:0b:d4:8d:34:8e:cf:a2:6c:81:11:36:64:ab:
fb:69:5e:6f:ad:0a:e3:90:85:c6:a7:ed:45:67:b1:5d:60:ca:
75:6e:c1:32:bc:76:a5:7b:99:45:49:46:2e:1c:ea:72:f2:b0:
15:36:d0:49:bc:51:66:5e:0a:35:15:85:c7:5b:92:85:3b:37:
7d:d4:55:5c:f5:a3:b7:7a:a4:cb:21:25:40:10:46:f2:53:f7:
0b:aa:42:d0:f1:ed:ef:3c:f1:53:b7:86:f0:65:88:3d:7d:f9:
21:1d:6b:41:98:eb:16:e9:5c:93:d9:50:ba:a3:cb:ed:26:5f:
c7:78:46:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:53:40 2025 by rpki-client