Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa
File: 00d48a25-0292-390b-8771-b64ad9beccdb.roa (raw, json)
Hash identifier: 83c27wuBXKMA1L1YCq1wPpLTbI/lmOThdq/y0WaXIg8=
Subject key identifier: F7:8D:9F:C4:E7:FA:F7:3B:63:A7:FD:75:47:49:64:B7:18:62:30:77
Certificate issuer: /CN=a91fff12-f74d-4a80-9a5d-f225534bc527
Certificate serial: 010D0C9F43285847F7DC38A1B852E3C2D8171750
Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa
Signing time: Fri 22 Nov 2024 22:08:20 +0000
ROA not before: Fri 22 Nov 2024 22:08:20 +0000
ROA not after: Thu 20 Feb 2025 22:08:20 +0000
asID: 46595
IP address blocks: 209.169.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f7:dc:38:a1:b8:52:e3:c2:d8:17:17:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527
Validity
Not Before: Nov 22 22:08:20 2024 GMT
Not After : Feb 20 22:08:20 2025 GMT
Subject: CN=184dd403-3a59-44f2-8aed-b3ded18e56d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:75:20:ee:b0:aa:5b:24:61:06:42:4e:04:
a7:16:12:2a:15:29:e0:aa:84:c9:16:43:92:30:5d:
22:f6:d6:54:3e:a9:54:f0:f0:67:72:b3:d6:01:2a:
6e:67:6c:51:d0:cb:77:35:27:39:40:c4:c9:95:ae:
a3:6d:d6:29:b6:62:86:9a:e4:46:32:7a:a4:ae:ea:
da:43:47:55:57:bd:04:1a:42:61:9a:4b:31:3e:1e:
de:98:c5:44:48:77:e5:a9:2c:35:5e:4d:68:8a:ff:
51:cb:ec:54:3a:5c:aa:1c:a0:b0:04:dd:32:16:a0:
9d:64:03:7c:e9:c7:4f:82:1d:bb:41:28:91:c3:26:
98:54:85:d1:ad:33:d1:45:c9:6d:96:68:3c:d4:d4:
72:40:9b:a5:1d:1b:d2:13:22:82:db:fd:1b:9f:de:
70:02:8e:25:3a:f8:87:ce:e7:49:a6:15:82:7b:4e:
9f:a1:f2:97:9d:e6:da:bf:0d:80:f1:ee:0a:b5:51:
4a:29:21:f5:27:8a:37:e5:aa:12:53:d3:7c:38:e4:
d5:3b:d0:d8:c6:23:69:36:21:92:8d:2b:61:c6:ec:
d3:7d:64:43:e4:44:aa:9b:94:55:82:44:4c:7f:ac:
b0:40:7c:dc:8f:dc:22:e6:ac:2f:9b:fc:ec:4f:2c:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8D:9F:C4:E7:FA:F7:3B:63:A7:FD:75:47:49:64:B7:18:62:30:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl
X509v3 Authority Key Identifier:
keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
sbgp-ipAddrBlock: critical
IPv4:
209.169.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:1b:e4:51:9a:5b:12:a8:04:c2:bb:eb:fa:74:0f:3f:ae:89:
88:a1:18:46:34:76:bd:fb:89:8f:e8:2a:c8:d4:e7:d6:07:2b:
97:b5:8c:dd:66:42:ae:ce:5e:33:64:a5:a9:65:09:46:c6:2f:
2c:57:9a:c9:e6:20:55:58:e3:f0:a8:97:53:29:43:8c:8a:47:
9a:1a:b1:1b:bc:af:fe:e8:2e:cb:c4:a1:cc:ea:c6:b7:2b:c5:
25:e0:d1:14:ca:03:0e:6c:33:ee:5f:53:86:53:9f:90:69:d4:
3b:2c:6b:25:cc:ed:42:d7:9b:18:72:ae:a5:a6:6f:3a:6a:34:
b7:89:17:9d:ed:c1:c9:3c:e5:9a:e2:65:a9:a8:d3:c9:54:16:
a5:74:85:5a:0c:cd:18:ac:da:e8:8b:01:25:67:5c:32:75:c8:
e7:db:49:e8:a3:e5:54:29:7e:ee:e8:f9:5a:48:43:de:69:c3:
3c:80:2b:8d:a0:66:d9:9a:33:34:f1:a2:02:b1:74:eb:10:ff:
83:ca:2a:2f:f2:4e:33:21:ad:5c:2f:92:55:27:3b:b9:aa:40:
19:33:2e:0a:db:a5:f0:60:31:6d:d5:19:94:a1:13:71:96:8a:
fa:e3:4d:b9:bb:7b:fd:7c:67:7c:35:36:8d:a8:ae:33:2d:d9:
c2:26:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:29 2025 by rpki-client