Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f8b0a3e0-9b1a-30a4-8749-ef216dfe7ee1.roa
File: f8b0a3e0-9b1a-30a4-8749-ef216dfe7ee1.roa (raw, json)
Hash identifier: sCyhQgluK3IU2QsCEtZyA9ieU5BZrNvshH9WyjtE7F8=
Subject key identifier: E2:2C:A6:C2:B0:A3:73:27:BD:ED:DB:28:B3:6E:18:4E:AD:5A:DD:2F
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848388557C172401FE370B07D80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f8b0a3e0-9b1a-30a4-8749-ef216dfe7ee1.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 393452
IP address blocks: 209.151.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:57:c1:72:40:1f:e3:70:b0:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=932bdc92-ce41-44c7-a308-3511ea307e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fd:98:d3:9b:71:cf:5e:28:07:0d:7c:07:13:
b5:eb:ae:f4:17:9d:8e:dc:60:ec:b6:07:75:0c:8e:
e2:74:65:60:37:fb:25:b1:ee:1a:69:4e:0c:2b:b3:
d9:c2:4a:93:e8:b8:87:1c:85:97:01:4f:5f:23:a8:
45:fe:87:59:a1:8c:85:aa:a2:c8:9d:48:f6:e4:53:
d5:94:c0:43:ab:83:c5:e8:1e:c0:4d:63:5d:87:03:
1f:a4:10:ab:5d:dc:7e:87:a1:6b:41:e5:c6:5e:7c:
21:a2:4d:1d:63:cb:a4:7d:b3:9f:48:ff:d3:bc:2a:
6d:c8:49:fc:81:e2:8c:23:d9:eb:7f:f5:1d:b3:35:
d8:bb:63:b6:4e:ef:e1:a0:c3:e4:8a:a7:6f:b5:28:
7f:bc:a5:9c:d0:34:78:bf:28:a5:5d:3f:c7:8e:b4:
ed:13:af:d1:34:c8:0c:d6:36:be:94:d8:6a:74:5e:
cc:f2:15:9e:3c:a3:eb:df:96:05:7a:d1:c3:86:2e:
b6:9a:67:56:a2:8e:9d:e0:aa:a7:d1:b0:94:83:2f:
8f:3f:26:b9:a4:2c:8b:5c:0a:f6:9d:8c:b7:41:de:
d1:a5:39:80:79:e3:8c:7e:be:b3:e7:6a:5b:40:9d:
a1:49:c1:75:01:f4:36:eb:71:08:ee:f0:48:80:8c:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2C:A6:C2:B0:A3:73:27:BD:ED:DB:28:B3:6E:18:4E:AD:5A:DD:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f8b0a3e0-9b1a-30a4-8749-ef216dfe7ee1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:3d:06:75:a8:d0:6a:89:26:1d:8d:e8:10:cf:8d:61:5f:6a:
97:56:da:ef:9a:2f:d4:c7:04:87:f2:d2:7c:ff:2f:36:60:e8:
44:38:8a:f7:61:d5:6b:84:63:4f:ff:85:1e:73:74:db:74:d5:
da:69:df:99:81:86:72:93:1e:aa:f3:c2:a3:a0:13:45:1f:cc:
7a:dc:8f:fb:07:34:bc:b0:64:07:e5:1f:ea:58:a2:2e:05:7e:
df:60:a6:5a:97:ad:41:3c:02:bc:1a:2e:ce:1e:d8:99:b8:26:
53:10:71:c4:5d:42:47:4a:22:1c:fe:4e:74:d1:a3:b4:85:56:
1e:b3:7e:65:4b:d5:99:9a:26:f9:e2:9c:6c:71:f1:30:54:20:
f9:9e:c1:4a:5f:e9:00:49:21:fe:f4:74:c9:2a:61:98:91:3d:
b9:ee:36:74:1a:7e:3f:e8:a2:1c:32:9e:ab:7d:eb:60:f7:5f:
d3:68:ce:5c:03:a5:94:3e:f4:88:49:e6:de:d3:41:7e:03:ea:
3e:83:0f:e1:3b:7d:b4:54:1d:ef:09:0b:88:eb:70:12:37:1f:
7a:f0:e5:62:6d:97:1e:31:1d:05:14:97:3c:05:da:09:88:28:
fd:a6:e8:c2:dc:13:9d:65:b3:98:30:cc:46:a8:6c:0f:84:31:
81:49:42:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:04:43 2025 by rpki-client