Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fd7f83c1-f827-3297-a189-95647b2df8c5.roa
File: fd7f83c1-f827-3297-a189-95647b2df8c5.roa (raw, json)
Hash identifier: iQypYG421qiqIEgr2/A5sCjXTdLE5Wa+1MtM9LdDbHg=
Subject key identifier: 7E:40:22:FD:76:CE:74:34:2A:8C:BD:9D:82:09:66:42:5A:13:5F:44
Certificate issuer: /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial: 010D0C9F432858484EDACFC3E4F6019EF8F31680
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fd7f83c1-f827-3297-a189-95647b2df8c5.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 213035
IP address blocks: 209.182.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:cf:c3:e4:f6:01:9e:f8:f3:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=4dd875a4-3737-4459-8e60-44b1085b3a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:49:05:30:ae:eb:a2:1c:7f:08:25:3e:02:76:
c9:2b:01:d4:df:d7:87:f5:06:2d:15:1f:2f:bb:74:
54:6e:09:f1:fa:f9:bf:0b:b4:25:d2:0d:bf:6d:17:
8f:0d:df:65:0e:e4:b1:6b:82:93:e9:73:1d:5f:cb:
38:4a:81:b3:2c:4d:37:64:7c:94:24:c0:01:e5:65:
76:be:e4:e8:5c:c3:0d:eb:33:fa:53:a3:d9:23:a9:
cf:bd:90:17:38:de:ea:35:4f:23:aa:81:ac:fc:25:
1d:bb:1a:a3:dd:ba:a4:e9:ab:b6:50:8a:8d:8f:82:
30:ac:47:e6:b2:3c:1a:a4:e3:56:30:36:7e:a4:39:
f2:4f:56:42:dc:c2:dd:3d:ad:5e:bb:42:b2:2f:f6:
bb:6a:dc:c3:53:0d:53:5a:db:1e:9b:57:0e:b3:d7:
b9:14:51:9e:1e:7e:cc:52:bd:19:74:0c:91:45:b0:
0b:81:1a:de:fd:aa:5c:fc:16:45:4e:af:f8:2f:8f:
d1:81:c3:8a:78:c6:7e:f5:52:50:79:a1:48:94:2e:
84:12:5d:e9:57:73:7a:d4:98:ed:9f:a8:b1:80:4b:
f1:68:17:27:88:70:76:d5:d4:93:ea:9b:a5:7a:0e:
0a:97:4b:d3:36:c0:b4:fe:c2:23:b6:9f:c7:f3:d9:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:40:22:FD:76:CE:74:34:2A:8C:BD:9D:82:09:66:42:5A:13:5F:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fd7f83c1-f827-3297-a189-95647b2df8c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
X509v3 Authority Key Identifier:
keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
sbgp-ipAddrBlock: critical
IPv4:
209.182.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:e7:4d:c1:aa:74:8f:11:c2:83:66:ce:2d:0d:b2:0f:93:6b:
98:51:48:ab:c5:3e:8a:f5:28:9e:7d:a7:07:28:31:c5:ca:fd:
cd:bc:ff:16:c0:b4:5b:fc:d3:9a:6c:64:69:a7:93:a1:b9:ec:
72:66:bd:9a:a0:d8:55:25:d9:f5:76:25:b8:b3:b9:59:16:18:
1c:bc:68:b9:1e:91:68:82:8b:90:d4:fe:fa:2f:30:0a:d2:6d:
c8:6e:f3:4b:92:7d:2c:23:b2:dc:1e:75:8f:41:f7:a0:9c:b9:
47:42:0c:f1:d2:e3:ab:9a:ff:ba:54:af:17:72:d7:aa:09:89:
ba:4e:bd:ba:34:ad:62:c9:bf:c0:81:a3:20:0a:88:df:90:2f:
8d:b8:84:b7:1e:13:f6:d0:0e:7e:e2:50:df:67:07:c2:f6:e0:
2b:09:71:d4:ea:57:78:e1:d0:f4:2e:30:e9:39:0d:3f:1a:19:
2d:10:66:0c:5a:cd:22:24:f9:f1:4d:6b:1c:8f:6c:32:1b:5d:
2c:1f:68:41:fe:ea:bf:4c:4d:38:24:58:45:2f:c4:29:b0:06:
7e:d5:60:8a:18:92:1e:14:cb:57:f5:78:4e:0e:f1:47:d5:75:
2c:71:7e:74:35:19:73:20:c2:f1:0c:7f:a6:d3:59:b3:a5:94:
ba:9f:2f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:14 2025 by rpki-client