Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ba1fca18-415c-3df8-96c5-72976843b1a4.roa
File: ba1fca18-415c-3df8-96c5-72976843b1a4.roa (raw, json)
Hash identifier: Bl/48Nl/kAQoPNXgC+D4PaGxqBDI+a86bD2Kd6aNdrE=
Subject key identifier: F8:5D:9A:C1:04:E4:A3:2B:AF:20:8D:93:CE:C3:17:3F:ED:AB:5D:B1
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848530AE3F3C97BC6D982E66648
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ba1fca18-415c-3df8-96c5-72976843b1a4.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 55034
IP address blocks: 209.8.50.0/24 maxlen: 24
209.8.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:e3:f3:c9:7b:c6:d9:82:e6:66:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=db5e1128-a99f-482f-9bb0-2d54c78c9b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:c5:3a:78:5e:f2:1b:2b:04:2e:f3:98:32:
d7:76:36:81:73:65:1e:ac:0c:ab:13:b3:26:f8:9c:
15:05:45:d8:2e:87:c5:a4:4e:08:8f:68:af:e5:fd:
40:a7:20:4a:6d:e2:1e:ad:f7:3a:a4:ec:13:48:aa:
b9:25:2e:e1:b0:af:18:6c:2d:bb:a7:75:5d:3f:fc:
19:6c:ab:60:61:fd:e3:c0:c5:b4:9d:ba:bd:76:33:
fc:c2:1f:c6:ca:4d:ca:2b:ee:9d:a1:12:26:18:62:
5b:96:e9:d9:00:a8:fc:a4:e0:79:95:d6:1b:1e:35:
87:e0:c8:a2:d6:05:71:3f:72:90:df:d1:64:ae:62:
ec:6e:4b:42:33:9f:23:de:86:1f:b5:fd:d2:9c:7a:
ea:0c:df:a6:ab:34:a5:d6:89:ae:1c:fe:57:bd:a4:
94:be:de:55:cd:ab:ff:93:3b:d7:4a:2f:2c:62:59:
c0:62:b8:9e:71:70:b3:d7:e8:5c:ba:f8:2e:9b:2b:
c5:a5:8a:b1:21:36:e9:7f:16:3c:a6:e6:21:e8:0e:
e8:fb:25:87:3b:f8:a7:6f:0a:3b:31:e7:84:28:e2:
72:15:76:41:2d:7c:2c:28:c0:29:93:9b:f9:a3:70:
d1:13:56:d7:62:66:ef:05:bc:85:e2:9e:90:07:8e:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5D:9A:C1:04:E4:A3:2B:AF:20:8D:93:CE:C3:17:3F:ED:AB:5D:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ba1fca18-415c-3df8-96c5-72976843b1a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.8.50.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:e4:9a:76:4d:dc:d9:24:5c:65:28:29:86:25:55:69:5e:d3:
0c:8a:7c:24:aa:2f:34:3d:43:bf:a9:57:6a:aa:b6:f2:0f:0d:
fd:94:17:9d:26:6a:10:73:55:e4:de:39:d4:77:7a:34:33:40:
31:a8:9a:b4:68:09:a5:5b:74:26:a1:75:67:3a:25:2e:fb:03:
bb:62:21:8d:21:d4:81:a5:58:ff:37:86:c7:02:bf:54:70:b6:
46:19:26:42:bf:b2:8b:4d:47:6c:40:d4:eb:f1:23:84:88:ee:
a6:cf:c2:2d:0e:43:6c:fc:7b:49:5c:2a:2a:77:4f:8c:5b:5d:
d7:61:49:31:1f:9a:05:e3:23:29:db:91:29:2d:aa:91:03:44:
6b:07:ed:bd:85:6e:6d:ed:94:cc:6c:19:49:40:6a:3b:db:21:
73:68:3d:8d:a1:61:fc:e0:78:9f:d4:b3:f1:57:99:fb:70:59:
26:98:48:89:6c:92:4b:a5:5e:7c:e8:ac:25:1b:98:ea:b1:06:
68:89:0d:70:b3:c2:46:57:eb:c7:66:a3:ce:ba:b3:48:f0:dc:
ba:55:77:56:81:7f:be:ff:60:08:e4:1a:b1:52:58:c7:51:3b:
e5:b8:b9:4b:33:6a:58:6d:a1:df:95:3f:3f:bc:bc:de:ba:05:
43:22:bc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:32 2025 by rpki-client