Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/5b0fc337-9abf-3ab4-9c1f-618aa9769d20.roa
File: 5b0fc337-9abf-3ab4-9c1f-618aa9769d20.roa (raw, json)
Hash identifier: R8kNaN1snL4x5BkDbaom1EHgLk87WnxfpN/eJBdyU+4=
Subject key identifier: FA:B0:76:90:9A:3E:34:97:EC:1F:7B:46:EA:99:D5:75:C2:99:23:3C
Certificate issuer: /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial: 010D0C9F432858482EC010315FAB4225049D2560
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/5b0fc337-9abf-3ab4-9c1f-618aa9769d20.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 197715
IP address blocks: 209.182.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:10:31:5f:ab:42:25:04:9d:25:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=2a40d385-63e4-44af-9cf5-583d3ec184dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:09:91:b3:3e:21:c5:f3:c6:e1:02:76:3b:
73:dd:a0:ff:ed:08:36:5f:7b:ba:30:06:50:91:c8:
20:32:24:5d:3e:47:c5:1f:d0:57:e6:84:ac:3d:85:
88:a1:9c:de:53:b3:11:32:85:56:d6:81:79:ed:ec:
a0:8e:e6:93:aa:7d:ca:56:3b:b6:fd:3c:92:bc:7b:
75:2a:f4:7e:2b:cc:fb:90:18:2e:57:78:b2:31:77:
45:23:59:89:22:7d:59:6e:06:3f:7b:dc:78:1d:75:
ce:45:1f:ab:c3:c3:26:22:11:57:0e:1b:6e:71:0a:
79:c4:06:69:3c:f9:33:e5:d3:75:b0:15:64:8b:76:
6d:79:12:dd:76:96:86:6e:50:34:0e:b4:d6:d8:2e:
78:5c:55:46:82:a2:1d:ee:06:03:13:d7:fa:3f:95:
6b:c8:ec:14:92:ad:8e:76:4f:8f:ed:72:28:ba:2b:
11:ac:78:ea:b8:6a:16:c8:e7:ec:83:fa:15:4a:d4:
da:20:98:33:c9:06:66:5e:f9:fa:83:da:f8:b4:0c:
f7:3c:bc:42:39:d1:91:9c:54:c8:51:3b:fd:11:67:
7b:e4:06:7a:29:d0:39:fe:0a:bc:fb:73:b2:19:26:
ba:b8:44:e0:a5:a8:7d:63:b6:91:46:63:bf:8f:4d:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:76:90:9A:3E:34:97:EC:1F:7B:46:EA:99:D5:75:C2:99:23:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/5b0fc337-9abf-3ab4-9c1f-618aa9769d20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
X509v3 Authority Key Identifier:
keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
sbgp-ipAddrBlock: critical
IPv4:
209.182.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:9e:6c:1c:4f:8e:d3:a7:f9:be:f3:3f:b1:04:1e:99:18:e5:
f4:1f:4e:b0:41:b2:d5:e1:48:33:de:fc:a5:7d:a2:84:f3:eb:
63:a0:a5:18:df:87:bf:de:8a:b0:73:60:56:a6:1c:8a:5e:bc:
30:e3:7a:72:3d:e3:4a:6b:ff:b6:b8:d6:f3:92:79:87:12:ae:
36:a7:d7:c7:52:26:95:3d:63:96:b8:17:20:d7:6e:60:28:31:
4d:9e:13:29:ca:d9:88:d5:88:6e:86:fc:af:3f:68:aa:10:53:
b5:94:f8:8c:f0:41:18:5a:1b:8a:f5:ac:ba:e0:b3:90:61:fc:
1e:29:1a:4f:28:e2:07:3c:91:5a:ab:33:8f:e0:b3:4f:96:a4:
ad:ce:20:4a:2f:55:ca:82:0c:27:72:b7:e2:f5:be:ab:0f:d9:
32:53:45:51:84:1b:a8:f2:9c:eb:69:b4:c7:16:62:8c:c3:19:
ac:bc:31:1e:16:e1:e3:b4:2e:7f:cb:a3:38:99:cd:96:b9:bf:
42:92:9f:67:74:f6:1d:dc:2d:79:c6:b5:58:a2:b1:49:c9:34:
82:8a:74:01:62:7e:db:bd:bc:f8:79:96:f6:42:d8:ca:76:db:
10:19:8a:ec:04:1f:59:48:65:af:75:12:7b:33:55:5f:da:3b:
aa:ca:e7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:43:41 2025 by rpki-client