Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa
File: 301685f9-eb30-346d-a98c-6f6531412033.roa (raw, json)
Hash identifier: fRaLWD7Bi5G7bo2x3asT7GI08eZ64wyGzZRC8roU4AY=
Subject key identifier: 5E:D1:15:43:56:88:73:56:23:13:7B:D3:36:D4:65:3D:ED:24:47:EB
Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial: 010D0C9F43285848090FBD2BAB222432A7177780
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 14618
IP address blocks: 209.114.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:bd:2b:ab:22:24:32:a7:17:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=d7f0c825-4b79-48de-9f0d-3a80013df8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:fd:82:07:3b:b6:fd:d6:ae:93:fe:1d:0d:
a0:2d:1d:dd:2e:3a:ab:f8:1e:1a:55:ef:64:37:bf:
f5:e4:99:2d:13:86:ac:96:a8:de:08:39:59:97:43:
b6:fa:5d:21:b0:46:ba:5a:da:21:d1:e2:47:26:fa:
c9:34:18:54:cc:c1:97:ad:71:f0:f1:4d:9f:8a:ed:
18:f2:ef:02:16:c5:ac:77:3b:69:4f:48:bb:0c:ad:
71:3b:8a:7e:f4:57:8d:06:b3:1b:3a:fd:5a:35:b0:
0e:a9:a3:97:a7:99:1c:4a:a6:0e:e9:2e:11:cc:f0:
37:2f:c8:4b:fc:f5:71:69:28:b8:53:d2:2d:b9:61:
06:a2:3d:ea:e2:33:f6:bb:d0:79:34:b2:89:2c:c7:
68:65:b1:ba:4f:49:7b:b4:8e:5d:f6:c3:c7:c3:01:
12:1d:ce:cf:cd:f1:24:3e:90:36:91:8b:a7:e1:12:
27:95:bd:af:84:e3:03:c9:d6:c3:95:6b:15:1d:5f:
d7:37:5d:e6:fc:d0:0e:79:e5:63:5d:6e:4f:b0:96:
b8:1f:b3:8a:48:5f:a9:f5:6e:63:b1:35:03:41:9b:
5a:44:74:17:99:5b:ad:e7:bf:ce:6c:07:7c:c4:1d:
63:19:b3:91:f0:bd:bc:48:3b:f9:bf:ea:0a:79:13:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:15:43:56:88:73:56:23:13:7B:D3:36:D4:65:3D:ED:24:47:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
X509v3 Authority Key Identifier:
keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.114.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:ce:e6:45:bd:66:fe:b0:f3:d3:98:0e:c6:92:81:e0:d6:5d:
9a:0c:ad:ef:31:45:fe:ca:45:99:72:b3:60:59:92:9d:62:5e:
e7:8f:1f:a9:03:fa:cc:5f:54:55:61:7f:d8:b1:5a:7c:5f:f8:
58:00:6c:55:9b:58:fd:2b:40:89:23:38:a9:00:b5:54:23:f1:
05:d1:78:97:d0:4f:83:35:d4:f1:3d:61:70:7f:1a:a0:30:b2:
7f:d9:6e:c4:5f:3f:56:53:dc:ed:f2:2f:4b:2d:9d:dd:cf:af:
f5:05:fb:c5:c0:0f:e9:95:20:4b:c9:76:60:6f:89:1e:19:5e:
2c:ec:95:cb:af:50:07:6e:81:73:2e:fa:a9:af:ca:a6:dc:a1:
0c:15:0b:b1:c8:02:67:6d:16:31:21:2c:15:bb:f3:47:8b:56:
56:9c:2f:db:da:0e:67:d3:17:ca:50:46:69:27:85:c2:f3:8a:
45:be:b0:66:68:dd:af:85:01:c5:bc:d5:66:32:94:b5:98:9d:
a3:ac:ca:12:db:cd:7e:bb:fc:48:11:0c:06:f8:c4:bc:c2:dd:
91:0f:c6:02:d3:a2:ff:d3:ca:0a:fc:a7:ca:d9:cc:68:ef:7d:
5c:60:c6:4c:8c:af:6b:2d:ad:10:00:b1:d5:83:b1:66:7d:10:
3b:b9:de:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:26 2025 by rpki-client