Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa
File: b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa (raw, json)
Hash identifier: RPXX3IRxJut72pMx9xvHWEZ6NpRIDdO2PaFWwVy/nAQ=
Subject key identifier: 98:D0:19:E7:FE:D9:CF:37:DC:C3:EC:09:F2:4B:90:87:1C:8E:62:96
Certificate issuer: /CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46
Certificate serial: 010D0C9F432858483E1AB037EC37754FE6D50780
Authority key identifier: 0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 142.9.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b0:37:ec:37:75:4f:e6:d5:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=8cf9fcb9-f20e-4ee3-a074-e325c5b6a9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2f:e2:06:16:e1:ef:d7:f1:55:23:ed:ac:00:
88:80:24:10:83:ff:56:ac:34:4d:a5:0e:80:f9:47:
11:0a:5b:0d:71:ea:a8:5a:49:4d:a1:22:ea:0b:b9:
ce:bd:15:ec:1e:fd:2a:f1:ea:94:7b:9f:4e:20:8f:
42:25:98:28:dc:2b:57:3b:d8:15:46:cd:e8:c0:a7:
9c:9f:94:f4:89:2a:ed:dd:5d:81:fe:9c:aa:62:17:
31:43:b2:26:62:8e:13:f1:1f:d6:0f:b9:cd:d3:41:
8c:90:37:7a:22:64:0e:12:ff:c8:5d:25:33:3c:47:
48:c7:5c:c8:64:24:06:b5:eb:6d:5f:1b:68:21:3b:
a6:79:80:7f:c4:cd:97:90:f6:a2:f1:3f:6a:2e:e4:
fb:7b:2e:43:ca:3f:b2:2b:21:65:b5:07:fe:e5:b7:
e2:66:31:7f:4f:7b:45:86:83:3b:0d:2b:ca:65:5a:
e6:28:51:33:29:35:8a:fd:cb:a6:24:bd:a8:d6:af:
35:bb:0a:e7:33:7e:8d:c8:96:4c:8e:ee:33:3b:45:
38:bf:88:84:a4:f3:38:04:1d:ed:38:32:c3:49:e2:
05:6b:cb:f7:15:1e:3a:57:ac:df:82:88:2c:5d:35:
f1:f6:56:65:58:32:c6:6a:f0:7a:5b:34:c0:ac:84:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D0:19:E7:FE:D9:CF:37:DC:C3:EC:09:F2:4B:90:87:1C:8E:62:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl
X509v3 Authority Key Identifier:
keyid:0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer
sbgp-ipAddrBlock: critical
IPv4:
142.9.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:59:e8:ec:93:29:2f:3a:ce:f9:ea:0a:da:4b:9d:e9:d0:61:
e8:90:bd:a7:54:be:7c:ec:77:c4:ef:e0:46:43:83:c6:98:2f:
32:2a:03:6d:59:67:3f:b3:8d:f9:cf:f9:34:f4:41:13:dd:96:
92:d3:3d:52:02:c3:89:36:38:00:cd:46:07:c6:ee:d0:1c:d9:
60:8d:c8:2d:23:eb:12:02:5b:77:57:ed:3e:2c:69:d2:a3:9e:
fa:2e:f3:85:34:28:f6:fb:f1:68:43:51:20:da:2b:4d:3a:25:
37:80:55:64:ed:1c:d0:16:91:d5:cb:a5:b6:4d:66:a0:59:6e:
d1:ca:0d:62:e3:8b:bd:5b:2d:db:7a:f5:13:e1:67:51:5a:4e:
c8:56:03:fe:61:cd:65:7a:0f:6c:cb:20:6f:78:3c:b7:1d:74:
e7:bc:b9:aa:04:cc:45:a9:6a:25:e7:0d:68:74:74:75:7d:20:
3e:ed:d9:64:49:ec:9e:b7:28:ad:6f:34:74:55:44:57:cb:95:
25:ee:3f:d9:74:a0:81:93:be:91:9d:f3:19:2a:ae:9c:bb:40:
0e:4d:36:e2:d1:7e:2c:00:5e:9a:33:d4:9f:11:1c:82:6f:bf:
65:ef:d7:3f:b3:80:1a:4a:d9:03:ee:5f:1e:51:e0:ed:6f:2a:
46:e3:31:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:07 2025 by rpki-client