Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa
File: 5c80a08c-e49d-33f4-b617-5ada5f2af850.roa (raw, json)
Hash identifier: bkWhi5DgIolByY/EIjIvJniF8p8H24tB8KzZ7F9l2fo=
Subject key identifier: 43:C2:78:EA:8E:0A:63:8E:A4:02:FB:0A:E6:78:D2:EA:A2:72:ED:EE
Certificate issuer: /CN=e3370a8c-7e39-490d-985a-a478ce54459f
Certificate serial: 010D0C9F4328584862658A0609B33DFF5C0F8800
Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 4393
IP address blocks: 209.251.198.0/23 maxlen: 23
209.251.200.0/21 maxlen: 21
209.251.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:8a:06:09:b3:3d:ff:5c:0f:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=80f26439-59a6-4588-b0cf-68f2c2ee4dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:bd:6e:d7:39:11:7f:9f:15:8a:ec:8a:7a:
54:b8:b5:be:9b:2b:93:f0:2c:b4:78:54:80:ac:8d:
cb:01:d3:19:34:ce:55:0c:e6:8a:51:8c:ee:8f:27:
d0:75:d6:63:cc:46:c8:1c:51:fd:05:88:b2:03:c9:
2b:0a:46:6d:8b:69:7f:e5:21:57:92:52:20:71:ba:
53:29:4f:52:00:bc:5d:03:65:68:ef:95:4b:ee:44:
a4:4d:da:26:b2:23:a5:ba:4e:7b:f8:b3:73:03:76:
aa:74:46:86:b5:5d:71:c1:14:7f:b1:74:9e:53:a8:
c4:5b:65:7f:e9:0f:24:d2:8e:9e:25:48:b2:93:c5:
0a:0a:b9:33:8f:88:05:1b:88:38:42:ea:a7:30:01:
3c:d3:bc:a7:13:51:ac:0c:51:fe:a7:bc:d2:88:78:
48:e0:6f:a2:d2:1c:fc:6f:3f:aa:40:a4:d5:59:4c:
fc:0f:78:bd:03:9d:16:89:9b:eb:29:5a:68:37:74:
13:16:92:bb:c2:9d:43:94:79:5b:30:18:d8:89:f3:
6b:a5:17:e5:0e:0a:64:cc:c1:92:01:95:fe:9e:97:
41:77:cc:0a:2d:7d:50:f1:97:a8:84:27:e0:a2:e9:
49:22:b3:a7:6c:e6:df:c2:95:5d:2a:10:ff:0a:2f:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C2:78:EA:8E:0A:63:8E:A4:02:FB:0A:E6:78:D2:EA:A2:72:ED:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/5c80a08c-e49d-33f4-b617-5ada5f2af850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl
X509v3 Authority Key Identifier:
keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.251.198.0-209.251.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:a9:f9:f0:f7:07:dd:66:7d:24:91:48:9f:8f:6f:60:32:a4:
ec:0b:32:7a:14:da:a4:5e:aa:1d:d5:b7:59:60:e7:6a:5c:4a:
6d:5d:eb:35:22:49:c8:07:8b:7d:e8:c3:4f:0c:11:21:f3:45:
bd:36:8b:3d:32:66:69:b6:3a:82:90:01:28:55:41:16:a6:76:
06:19:50:5a:18:c7:2f:ec:82:e5:f0:bb:32:ff:73:e5:c0:55:
f6:04:b8:bd:c7:53:d7:80:79:89:95:ec:48:57:0b:6f:34:02:
9a:8b:dc:fb:79:1e:8e:37:02:89:f4:4d:aa:f4:2f:bc:dc:04:
de:61:c0:fe:10:60:6e:84:3d:bc:65:b7:b3:39:92:93:88:39:
4f:0d:76:bd:df:08:f3:1c:60:16:43:18:e0:22:4e:68:4e:99:
9d:82:dc:0d:14:23:6b:8e:d8:e9:b7:4a:fe:63:e6:4c:73:b2:
b8:83:ae:97:30:78:81:77:21:09:0d:78:c0:89:b9:ec:24:e6:
cd:40:0a:fb:bc:7a:61:80:14:89:04:5f:90:22:55:43:e9:80:
99:45:80:03:59:69:08:0b:cc:e9:70:2f:cd:aa:2d:b9:4e:cd:
de:08:77:4e:e1:d0:72:3c:9c:bc:85:43:15:20:b1:3a:cd:6d:
b0:ae:fc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:23 2025 by rpki-client