Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa
File: df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa (raw, json)
Hash identifier: DkjQ0zAGfBPuwNkufcdqZAC9BQchQE32+H4erVvN0u8=
Subject key identifier: 72:6E:35:82:1C:D8:F1:2A:17:E6:1A:54:82:63:B3:86:8C:94:2A:D5
Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial: 010D0C9F43285848AF2B7BDAE7D46201E0A34680
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 216.185.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:7b:da:e7:d4:62:01:e0:a3:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=f2adad1d-e479-402b-9e25-74b7129c3d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:c4:01:03:a8:19:f9:98:a2:15:19:0a:19:
9f:bc:81:87:ae:39:bc:9b:99:7f:f0:7c:92:a5:1d:
a9:bb:a1:be:a0:d7:6f:fc:6e:68:af:de:18:31:e4:
ca:b9:84:5c:78:ba:c5:2b:c4:d2:94:2c:df:bb:9a:
0e:d0:6d:d3:0c:fc:55:4e:fd:83:64:1a:87:43:b0:
1e:13:89:a8:64:b9:c5:6a:17:bb:29:7d:87:05:79:
f6:de:7e:f7:b0:d3:81:e0:f2:40:20:ba:3b:77:50:
a6:22:91:e7:4a:a2:a6:93:13:1c:ff:e5:87:c7:f5:
c0:25:d3:ef:28:bc:e6:6f:2c:48:de:d6:c4:f6:68:
8c:de:76:ee:46:a8:1b:7f:21:5f:bc:2f:56:d8:bb:
5b:cb:ef:94:75:1e:e7:7a:c8:41:86:8f:28:92:e6:
5e:ad:4e:80:e0:38:8c:65:b4:ac:8c:42:15:cc:71:
86:f4:1f:50:48:74:a8:1d:ff:f2:e9:47:30:1e:ca:
e4:95:76:50:1c:b0:74:b1:64:a2:4e:20:c4:a3:e2:
1a:82:e1:08:ad:6e:e2:67:df:2b:15:fa:90:6e:3b:
09:04:b9:a5:9e:72:5a:b5:ba:4b:d5:6c:05:08:4a:
df:12:c3:b2:1c:e0:4b:09:d8:4b:88:cd:d0:ea:db:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6E:35:82:1C:D8:F1:2A:17:E6:1A:54:82:63:B3:86:8C:94:2A:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
X509v3 Authority Key Identifier:
keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
sbgp-ipAddrBlock: critical
IPv4:
216.185.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:4f:16:d4:6a:65:5e:79:1a:a1:e2:d1:ec:ff:38:48:4b:f7:
27:fd:cd:5d:06:08:49:4d:a3:d5:e5:84:89:0f:f7:41:70:5d:
61:aa:06:f1:6f:da:45:d7:18:ef:97:14:f0:de:65:c5:d8:0d:
43:34:be:c1:39:a6:0d:48:c6:cd:fc:1f:9e:2a:0b:f2:a9:1c:
ae:82:46:ea:d9:ad:47:f2:1a:97:b1:51:5f:44:1d:f8:64:fd:
a6:7b:0d:a4:2c:25:fd:16:83:9a:fb:1f:93:3e:1c:13:fe:20:
8e:d3:94:84:2d:54:a2:5f:4d:67:f5:73:fb:7d:9c:97:b9:a5:
2c:77:89:fc:5a:53:d2:98:c5:37:94:28:96:43:10:28:81:8c:
df:39:ef:cb:6c:7b:57:93:d7:c1:36:ae:bb:2c:1f:b5:30:e9:
a9:aa:68:f5:6d:c5:8b:77:3c:38:6a:a0:48:02:02:17:54:7b:
4a:0a:7a:6f:df:15:a8:8b:9b:1d:e1:61:dc:28:5d:76:bd:33:
e8:06:e2:e8:73:69:56:22:c6:34:e9:81:0d:52:ef:aa:3c:50:
8e:bf:d3:c3:99:01:05:1b:3d:ca:e0:81:a0:fc:82:07:d4:e3:
1d:18:60:1e:b8:00:e3:50:d2:56:9c:ef:d5:b8:ad:cf:bd:aa:
9e:ee:96:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:34 2025 by rpki-client