Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435e1f29-f03e-3834-bf6a-8b95586b67d0.roa
File: 435e1f29-f03e-3834-bf6a-8b95586b67d0.roa (raw, json)
Hash identifier: nb1YLfKYYQ9G301b3YJ/jnemhJd4x/NGMXuAdM19a74=
Subject key identifier: 5E:51:F8:5A:4C:7E:3D:E1:F9:71:8B:1E:B9:44:40:C7:F8:9B:43:C0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA50BBCE63773FABEE3B200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435e1f29-f03e-3834-bf6a-8b95586b67d0.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 32787
IP address blocks: 209.200.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:0b:bc:e6:37:73:fa:be:e3:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=fd1ab1bc-3b50-4976-bfb5-3e871da2c584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:87:f7:f1:8e:ca:7c:8e:10:cb:b5:ab:34:
6b:cb:14:2d:92:4b:20:65:88:0a:77:5f:59:2a:fd:
15:15:cc:95:d0:bf:b6:db:ef:af:7f:4b:00:83:c1:
62:bf:46:45:40:39:80:3f:ad:68:83:47:9c:fd:32:
1c:0a:01:9d:c1:a0:33:42:68:bb:3b:2b:b6:01:02:
d8:23:32:ca:b4:31:da:95:84:91:78:00:71:40:f5:
cd:56:a3:e6:39:f3:48:54:46:73:21:96:0a:23:1d:
44:60:3c:8e:f4:77:9d:c3:1e:48:ca:85:1d:77:ba:
50:d9:1f:a4:d7:3c:e5:70:6f:c3:60:c8:2f:7f:e9:
17:a1:bc:13:5c:03:f4:f5:bf:55:88:b2:61:e2:c7:
03:b8:f6:17:7f:f9:2c:7e:84:90:7b:f8:a2:93:9f:
75:38:b9:d3:1b:64:93:97:24:b1:17:6c:68:9b:2b:
87:9d:fb:b2:c6:6c:07:2a:82:3c:a5:c5:a0:92:eb:
c3:88:19:52:5c:b0:a6:69:52:0b:51:bb:1c:c6:ce:
4a:e7:7b:b8:20:1d:a0:12:16:a1:02:29:f5:31:74:
18:f9:dc:66:a0:a8:06:9d:42:4f:66:bb:bf:e1:00:
2e:70:aa:93:0f:e4:38:04:fb:fa:05:1c:7e:9e:2d:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:F8:5A:4C:7E:3D:E1:F9:71:8B:1E:B9:44:40:C7:F8:9B:43:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435e1f29-f03e-3834-bf6a-8b95586b67d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
209.200.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:64:af:3f:5d:84:88:40:f3:0a:11:33:80:70:63:51:df:f6:
72:e7:f3:1f:82:12:b1:21:03:ef:26:ab:88:b4:dc:d0:30:76:
b7:6f:49:e1:46:a6:4c:e0:4e:ab:86:ec:fe:23:0f:31:5b:49:
51:52:46:6b:d4:5c:ac:ed:b9:b3:d4:3b:6c:12:75:c1:63:14:
b2:4e:6e:b0:74:c3:21:fe:ee:b5:32:82:d6:92:6d:6d:d1:5f:
75:99:26:c1:62:ac:ff:ca:39:ec:3e:88:0e:b8:73:f9:7c:aa:
18:59:19:cb:bf:ad:58:34:10:e0:1b:f9:a2:fb:9b:40:d4:c1:
c3:0c:b3:47:02:ba:94:e5:56:91:a9:20:83:a4:87:c1:05:e7:
1d:d9:60:b7:c3:b1:5b:12:77:bf:ae:0f:37:35:20:97:77:af:
f6:60:86:01:c6:d0:ec:0f:8c:fd:54:9b:14:43:6a:bc:9b:14:
74:2a:88:40:2b:45:21:02:81:3b:84:f6:b0:c3:e6:94:90:fd:
fc:4c:28:9c:6b:83:27:0c:24:f7:02:85:a0:2e:83:f8:35:7b:
6f:7f:11:30:28:03:cc:40:c2:9d:48:d6:d0:85:fa:f8:2b:57:
92:bc:33:1f:5c:04:c7:4c:cd:43:b5:cb:9c:0a:9d:d3:ab:84:
e2:66:20:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:38:30 2025 by rpki-client