Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a06c2b-aa8d-3ebb-b1f4-27213c2b612d.roa
File: d7a06c2b-aa8d-3ebb-b1f4-27213c2b612d.roa (raw, json)
Hash identifier: 1om2ny2cv4uVpIyQutGK61Z/KjYsPT+IDUPQmpvDCEU=
Subject key identifier: 69:CC:59:9A:3A:9B:C1:B9:9C:78:69:DD:94:97:70:7C:02:C6:D1:3B
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285847DF2F4697F00A7551BA22B280
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a06c2b-aa8d-3ebb-b1f4-27213c2b612d.roa
Signing time: Thu 14 Nov 2024 02:00:27 +0000
ROA not before: Thu 14 Nov 2024 02:00:27 +0000
ROA not after: Wed 12 Feb 2025 02:00:27 +0000
asID: 852
IP address blocks: 209.121.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:df:2f:46:97:f0:0a:75:51:ba:22:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Nov 14 02:00:27 2024 GMT
Not After : Feb 12 02:00:27 2025 GMT
Subject: CN=6dbf05a9-4ead-4bf5-ba1d-b9956f6a8baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:71:41:2f:d2:d8:50:b0:a9:69:60:5e:78:
33:3e:10:85:3b:96:8c:69:38:a8:7c:e0:b4:4d:42:
7a:6e:f7:f6:89:26:d3:3f:e9:58:3d:c8:3e:05:c6:
5c:0b:e9:b1:64:ce:9b:e1:fe:2f:13:ba:6e:ed:73:
78:05:db:97:21:37:b0:ff:a8:50:88:d5:2f:5d:d8:
e9:95:bf:f8:2e:cf:56:e4:a7:73:a7:ae:1f:c0:10:
e0:86:e9:70:de:c3:9f:1b:15:ff:63:85:d9:e2:ed:
f4:90:06:65:63:56:1c:99:de:1a:99:0a:4c:c8:ac:
e2:b6:92:47:58:e7:94:39:4e:65:8e:25:7f:70:56:
5e:8e:1a:31:a7:76:62:48:0b:75:9c:27:31:69:01:
1f:11:cc:f5:9d:a0:d2:06:75:8b:9b:d3:81:26:e8:
2d:2f:ef:3c:43:6f:6f:16:b4:f0:25:04:1a:35:64:
bf:de:7d:0a:6f:71:8f:80:00:d8:aa:78:70:45:ea:
d2:a6:38:72:46:60:26:f8:19:98:9e:71:1c:79:53:
e0:92:7f:43:8c:fe:1e:e9:de:7b:53:d3:0d:99:8a:
be:d8:6f:42:e4:54:c5:8c:31:e1:db:39:59:df:74:
46:d3:ea:dc:49:03:d3:ab:d5:45:1f:e9:f8:c4:11:
20:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CC:59:9A:3A:9B:C1:B9:9C:78:69:DD:94:97:70:7C:02:C6:D1:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a06c2b-aa8d-3ebb-b1f4-27213c2b612d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e7:e6:5f:ab:1c:48:28:9a:8b:8e:32:d0:00:ec:b5:03:a8:21:
34:c9:73:18:97:cb:42:cc:14:f6:3f:ad:72:7f:0b:08:86:b8:
cc:3d:30:ab:4d:97:1c:19:25:7e:72:f6:3f:66:1b:30:36:67:
28:f4:a9:1c:9b:7a:c8:44:d7:4d:65:53:92:35:8f:f7:85:71:
13:3c:41:5f:d2:5d:55:ae:74:12:3d:b5:4e:70:a0:fa:d4:c9:
e1:3d:31:2f:fa:ca:8b:45:43:31:52:2b:7a:98:b4:30:ae:2f:
41:08:ee:42:09:13:e6:b7:d2:fe:9c:e9:aa:15:fd:84:04:d1:
2c:0d:64:24:bb:87:4c:1a:38:b9:ab:32:c9:f4:86:5f:88:77:
21:b1:87:de:76:29:37:0c:31:6a:55:88:f2:b9:83:bf:8a:8c:
20:4f:0f:5a:fb:30:8c:a1:7e:ea:53:a6:33:93:43:f1:b6:07:
6c:4c:c2:56:b0:7b:7c:10:b6:a1:01:b2:da:0c:da:4b:7f:f1:
e2:71:bb:f8:cd:41:ba:14:1f:14:00:f4:59:e0:15:0d:e0:a6:
6e:9b:63:81:be:48:7b:91:c7:0a:e5:6f:a5:5e:08:b4:fa:3a:
a6:72:4d:99:1e:90:93:45:c6:a6:94:86:3f:21:45:c5:b0:8f:
39:99:47:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:08:45 2025 by rpki-client