Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/80e52123-939a-321b-9214-9cc8d4826f88.roa
File: 80e52123-939a-321b-9214-9cc8d4826f88.roa (raw, json)
Hash identifier: oL4H0jApUDveLtPVhltrV7n32s42dfR+SlejFaN1ITo=
Subject key identifier: F9:AD:53:5C:DE:5E:3C:21:13:01:16:FB:76:09:38:C2:58:6A:6D:49
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F432858481C9A8B0F108E23078ABFE8C0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/80e52123-939a-321b-9214-9cc8d4826f88.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 7262
IP address blocks: 209.9.216.0/24 maxlen: 24
209.9.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8b:0f:10:8e:23:07:8a:bf:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=6014841b-f7b2-4eff-a7d5-160aceef4f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:fd:c7:fb:7c:58:8f:1b:1e:84:51:a6:31:
42:0a:32:14:1b:26:a4:44:96:55:f7:c7:09:26:e0:
44:4f:4d:d3:26:b6:da:d0:35:ec:04:13:1e:56:4c:
43:cc:8a:54:0f:39:3e:84:15:e1:4d:0c:47:b9:38:
e1:83:9f:1e:80:c9:41:56:a8:27:b7:88:01:73:4b:
7a:4c:c5:51:a7:a4:69:62:af:e1:62:93:b1:b1:44:
88:73:08:c8:61:b8:15:fd:1d:5a:49:98:76:90:13:
06:e9:57:bc:45:a1:b3:ab:9d:63:5e:8e:bb:88:12:
9b:83:f6:9f:68:f1:49:d6:78:e6:6d:d2:e0:f7:88:
b4:b4:25:db:5b:a6:91:a6:17:50:9d:18:a1:28:d1:
44:dd:5d:89:d0:42:dd:c4:3e:5c:ce:e3:55:15:88:
b4:ea:35:23:bf:b8:6e:35:ae:5b:55:ed:13:87:7a:
7c:ea:02:46:fd:6a:38:db:6f:d1:49:85:91:35:e3:
ae:2b:9d:db:5d:5d:f6:77:50:2e:46:ee:87:f4:52:
1d:ea:0b:66:30:c7:7b:6f:a5:5d:fe:cb:1d:e5:0d:
10:f0:fc:d3:bf:ba:7a:a1:48:db:3b:5e:85:df:36:
40:cf:1d:51:26:97:94:7e:3e:b0:5f:5b:1c:ac:9e:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AD:53:5C:DE:5E:3C:21:13:01:16:FB:76:09:38:C2:58:6A:6D:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/80e52123-939a-321b-9214-9cc8d4826f88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:a1:e0:c5:f7:c2:95:92:ba:81:03:ec:b9:10:37:47:a3:74:
21:61:08:95:28:21:a3:8b:97:aa:fe:45:76:76:6c:56:70:2e:
b5:b6:ba:67:79:95:5c:75:9b:ae:42:e5:62:58:73:b4:b8:f7:
d9:a1:4f:2d:83:6d:0e:14:03:95:f3:d6:83:cc:5f:c0:45:07:
25:ff:c1:05:7b:64:b2:b9:9a:e5:66:1f:c1:5b:ce:97:bb:e5:
91:2e:99:cb:99:49:56:72:7e:cf:23:8b:9e:72:82:74:99:2c:
ef:d2:e0:37:87:5c:a8:c2:94:62:5a:3f:81:4e:ff:10:50:0f:
6a:92:b3:a8:37:43:89:c1:c4:f9:71:c8:08:73:49:79:45:c3:
2b:b5:57:d5:b9:56:49:62:a7:88:20:9f:bb:ea:31:1d:4d:86:
0c:8b:72:62:9d:9d:f3:a0:8d:fa:0b:ce:bb:a3:8f:ee:0c:b9:
52:06:48:d9:bb:1e:47:36:5c:c3:05:f2:56:85:3a:c6:93:c4:
0e:5d:ab:7f:47:72:3b:79:8b:0a:49:7e:df:6e:9a:28:ef:18:
6d:6e:a0:20:ce:a8:8e:0d:73:bd:c0:28:d9:b6:00:cf:86:e6:
15:dd:3e:1c:c4:7a:6e:97:43:22:28:5a:f8:dc:a5:45:69:08:
ec:cc:41:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:38 2025 by rpki-client