Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa
File: 25e1f105-51dc-3628-8af3-fd38d010fc75.roa (raw, json)
Hash identifier: Hiw1X5QC/XRCPO+Bes15VZ2EiSIvFl2zaA/ZcXKS+oc=
Subject key identifier: 26:49:87:D1:FE:26:19:D4:90:9E:55:F7:FB:DE:0D:21:BC:1E:1E:2B
Certificate issuer: /CN=77258d44-b15b-4045-943b-356f0becdaa2
Certificate serial: 010D0C9F43285847DF2F5113585C8B3508F06980
Authority key identifier: 6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa
Signing time: Thu 14 Nov 2024 02:00:27 +0000
ROA not before: Thu 14 Nov 2024 02:00:27 +0000
ROA not after: Wed 12 Feb 2025 02:00:27 +0000
asID: 399554
IP address blocks: 209.35.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:df:2f:51:13:58:5c:8b:35:08:f0:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77258d44-b15b-4045-943b-356f0becdaa2
Validity
Not Before: Nov 14 02:00:27 2024 GMT
Not After : Feb 12 02:00:27 2025 GMT
Subject: CN=793c8390-973d-44bd-87d9-1d488f04b1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:60:8e:db:70:d6:6e:fb:90:b5:27:53:e6:
4a:0c:31:10:b5:35:66:2c:5c:23:88:de:98:3a:4d:
4e:ad:01:72:55:4e:4f:48:de:27:97:18:e3:ed:9f:
b0:f9:4f:41:22:b2:6b:ae:5f:23:7d:d4:ba:ab:fd:
2f:82:2c:99:a7:9a:b9:94:2f:48:a0:da:0b:ac:9c:
c0:c8:98:1d:7c:06:7c:20:ab:02:89:6e:69:ac:2f:
86:67:1d:64:9b:61:f5:9e:1e:cf:84:48:c2:9b:0d:
bb:70:a5:4d:75:e3:28:50:67:17:ed:53:ff:9d:2c:
53:a0:b6:68:52:f4:6a:c7:a3:74:72:6f:c0:40:bb:
6f:a8:44:5c:aa:52:8a:eb:14:be:c9:b6:c0:be:8c:
79:f7:e3:31:35:97:02:c9:9d:51:71:b6:6f:fc:af:
74:f7:a5:49:46:28:8b:f3:b3:ed:5f:a3:d0:9e:de:
8b:d4:bc:f5:6d:df:97:03:c1:4d:05:7a:f4:43:46:
44:da:4e:a0:15:e0:ae:7f:95:2b:b5:87:56:13:07:
57:5c:d6:aa:95:85:1e:ea:11:0a:77:31:2b:ba:57:
02:6f:fa:be:77:59:e4:d1:aa:5f:49:6b:0a:a4:ae:
f2:01:d0:9a:af:6e:85:c7:be:9e:35:7c:50:b2:b0:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:49:87:D1:FE:26:19:D4:90:9E:55:F7:FB:DE:0D:21:BC:1E:1E:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl
X509v3 Authority Key Identifier:
keyid:6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:f8:a2:6b:83:dc:cb:b0:e9:63:30:d7:a1:16:46:b4:c7:ab:
d5:7f:a8:f5:4e:ac:67:7e:5a:89:64:90:a7:94:c5:6e:b9:12:
9e:24:db:36:5f:2b:96:9e:c0:ae:f6:55:c0:65:ea:1e:d9:47:
37:60:6e:f4:c4:53:5f:75:e2:f2:fb:18:7d:df:eb:95:f7:45:
e5:09:a2:d6:0a:9a:9f:4d:d6:d8:33:c2:51:f9:51:fd:89:c2:
90:4b:3d:22:96:68:87:7d:7a:fc:e9:fe:9b:5b:ee:90:60:80:
d7:9c:0d:ef:fc:58:19:87:15:4b:e0:a8:dd:ab:44:03:ea:f1:
48:de:50:f6:e4:88:4c:28:f9:e9:57:58:91:30:57:f5:81:83:
c1:ab:26:32:5c:ae:52:79:ac:d7:22:35:3b:8d:c1:5a:2c:c0:
8f:b1:da:4f:53:d4:8b:0b:5a:ef:95:93:c4:99:76:d4:e9:83:
12:30:e6:d6:ae:d6:d1:71:57:bb:a8:0f:e6:b7:a5:75:1f:97:
ac:2f:2b:8d:29:4e:a0:bf:63:13:0e:38:c9:7d:a4:ce:74:54:
24:cd:4c:ae:62:3d:02:64:d8:73:5b:e4:92:7d:15:5e:bf:df:
bd:a5:04:97:7d:c8:ea:af:47:c5:f7:42:52:88:d1:51:0c:ca:
e1:32:16:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:35:19 2025 by rpki-client