Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/c0aac8f0-caba-3622-a1be-349b5ab8e7a4.roa
File: c0aac8f0-caba-3622-a1be-349b5ab8e7a4.roa (raw, json)
Hash identifier: fHjCaXPgiRa+NWVxtyP+tVHDSTczYHB0tDmbuzTHR6k=
Subject key identifier: 49:A0:2F:7A:87:79:89:37:86:4E:49:1E:1A:1E:ED:37:91:92:1A:12
Certificate issuer: /CN=0c75fe19-a93c-4656-bf2d-b205565f9d07
Certificate serial: 010D0C9F4328584898D5FDD33E3035A5FFAA84C0
Authority key identifier: 6D:14:45:B4:DD:37:4A:3C:63:2C:A6:D0:69:3E:98:46:CF:B4:7C:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/c0aac8f0-caba-3622-a1be-349b5ab8e7a4.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 10482
IP address blocks: 204.209.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d5:fd:d3:3e:30:35:a5:ff:aa:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c75fe19-a93c-4656-bf2d-b205565f9d07
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=7c09adad-832e-41f9-8786-e5f29709beeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:50:06:e5:40:15:65:01:da:6d:45:67:38:
86:66:17:a8:4e:2c:2f:f3:b3:db:5d:5f:71:ef:5b:
43:ab:41:33:a9:71:b2:17:05:20:39:3b:a0:65:2c:
04:d1:3f:17:6c:f0:04:35:42:15:25:2b:91:a3:de:
c9:6e:80:15:82:b0:0c:14:32:57:24:c2:18:f1:6d:
93:34:92:5d:83:2a:33:9d:ad:d4:c6:84:50:f9:e3:
83:24:a4:d5:6a:76:1d:f9:1f:04:b1:ee:a0:e3:c0:
f0:28:ec:cd:e5:9e:5c:25:ad:0c:4e:30:94:86:29:
3c:9c:ec:41:c4:da:5d:a2:34:7c:3d:b3:2a:36:2c:
78:61:94:a9:64:9f:00:50:ee:78:59:fd:c0:c9:59:
49:2b:0d:42:06:01:78:e4:51:60:50:3d:9b:d1:f1:
ef:a3:0b:22:18:97:fd:9d:3c:b1:4f:38:48:3c:ee:
f8:f1:39:f6:b9:09:ec:08:68:7a:30:f4:e5:3a:ba:
25:e8:ef:62:5f:41:02:5c:a9:29:d4:b9:95:2f:5f:
7e:a3:8b:dc:d3:05:46:af:1f:59:c4:36:42:29:8f:
55:6e:8e:05:38:f3:d6:ce:c6:27:04:fb:9c:2b:b9:
59:54:c6:88:25:92:8e:86:18:04:de:85:a9:eb:59:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A0:2F:7A:87:79:89:37:86:4E:49:1E:1A:1E:ED:37:91:92:1A:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/c0aac8f0-caba-3622-a1be-349b5ab8e7a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/0c75fe19-a93c-4656-bf2d-b205565f9d07.crl
X509v3 Authority Key Identifier:
keyid:6D:14:45:B4:DD:37:4A:3C:63:2C:A6:D0:69:3E:98:46:CF:B4:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07.cer
sbgp-ipAddrBlock: critical
IPv4:
204.209.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:82:f2:d1:44:41:c7:1b:39:a6:cf:60:41:25:bb:5d:e7:66:
f0:1e:1d:d7:ac:da:27:75:76:cc:32:7d:11:e2:dc:ad:4b:39:
3e:ba:7c:88:cc:b4:7a:09:a5:70:80:44:ba:c6:6b:de:04:48:
2f:7c:80:59:f4:e5:81:40:fb:fe:5c:ae:7d:42:f1:0c:eb:75:
60:f4:95:de:30:88:c2:27:f1:12:0a:63:5f:ed:b1:62:22:32:
8d:65:93:5f:15:00:f5:da:3b:d2:ab:28:37:10:f9:eb:50:03:
18:01:3d:39:f6:29:e8:77:89:1f:73:02:9d:43:21:60:ec:9b:
e0:fe:b0:74:7f:21:72:b9:96:49:df:a8:01:46:20:c9:e0:60:
d0:4b:b7:da:dc:df:21:98:e6:32:65:d9:bf:f0:1b:ea:33:58:
e1:6d:7f:b9:94:b6:1b:16:34:98:8e:4d:15:47:95:11:db:d1:
6e:5f:a7:25:8b:d7:6c:ff:e4:39:f0:33:8d:6d:d6:40:f5:e7:
80:2e:25:78:65:0e:b6:b0:5d:d6:4e:ce:30:5e:59:cf:c3:50:
58:4d:2c:dc:9c:51:54:28:bc:02:25:4b:5d:bd:bd:f8:e0:eb:
6c:f9:72:1b:00:5c:7c:72:53:93:83:43:7d:d6:cf:06:e6:9a:
9a:3e:55:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:09:44 2025 by rpki-client