Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/c1c3e684-2cd6-3bd6-bbb3-b1372c15f6fb.roa
File: c1c3e684-2cd6-3bd6-bbb3-b1372c15f6fb.roa (raw, json)
Hash identifier: dC5li7qythvioYNm8RKDbfJ+EXCzb55UADDtNktCdpY=
Subject key identifier: BC:0B:42:50:6E:FB:A0:32:68:3C:48:0F:6F:B4:6D:B9:61:28:92:D5
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F432858486100496C0BBDAB0D0FD10900
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/c1c3e684-2cd6-3bd6-bbb3-b1372c15f6fb.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 2152
IP address blocks: 209.129.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:49:6c:0b:bd:ab:0d:0f:d1:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=6d8bd8d7-7037-40df-ac64-fc11bd5eef33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:14:1a:58:0d:86:77:8e:8c:89:c9:25:e0:
e0:f7:03:6b:0c:1a:43:45:d0:ac:f4:88:8e:cc:4e:
84:8a:08:a6:50:6b:0f:9c:ff:d7:33:a0:33:b4:38:
bf:ad:33:81:fd:cd:ec:77:ed:e7:a6:16:cd:63:01:
f0:45:ab:2c:20:27:36:77:b5:ca:4a:c7:c2:e8:9c:
84:02:4c:ba:e6:87:08:f1:0c:f8:63:f3:a3:e7:a4:
b4:41:97:86:35:96:d3:33:a4:bc:d2:14:1c:b7:f0:
c1:0f:88:61:6d:10:54:09:95:d1:ea:cf:14:61:79:
8b:91:e1:f2:28:43:53:c2:f6:04:96:e5:7c:b7:e6:
ec:99:b5:27:0f:0e:10:62:d7:14:d7:fd:30:49:8d:
79:61:06:e7:ce:d7:13:8b:7d:0d:dd:47:ed:18:d5:
96:35:4c:50:46:a5:2e:49:85:ae:40:52:48:cf:78:
57:a2:10:4e:a3:88:7f:cc:4b:76:ed:21:14:1a:a2:
b5:93:26:fd:f7:1b:74:2f:2b:fa:76:8d:de:df:33:
ea:45:0f:5f:bc:15:cc:01:d8:fa:9d:a6:dd:0d:0f:
ea:47:19:2c:38:e4:b1:53:23:c6:c6:07:e3:ff:2c:
76:41:04:02:42:5c:0b:c9:1e:9c:ae:5b:51:85:98:
c7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0B:42:50:6E:FB:A0:32:68:3C:48:0F:6F:B4:6D:B9:61:28:92:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/c1c3e684-2cd6-3bd6-bbb3-b1372c15f6fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
209.129.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:32:5b:d7:a4:dd:fe:a7:c4:ae:16:f7:54:66:b6:21:ca:91:
e2:46:bf:06:03:e2:95:23:08:c1:a8:45:f4:5f:a4:51:d5:19:
2a:ec:0a:b4:96:16:54:ca:f4:b7:8c:3b:fd:5c:e5:89:15:42:
a9:20:0f:6f:a2:e3:da:45:b3:7c:f3:c1:f6:b1:f5:53:c1:89:
23:0e:9e:2d:99:66:f7:db:f7:b2:53:6b:49:d6:bf:ae:40:9a:
50:32:28:86:36:5a:79:85:bc:89:c0:1b:5b:a2:a8:3f:66:f8:
0b:f7:73:d1:ce:c1:f3:c6:61:36:36:75:6d:95:e2:a7:b3:b9:
51:c5:4e:70:ca:f9:d4:f1:79:bf:71:25:ba:1a:dc:01:97:38:
96:69:04:de:ff:41:8d:8b:9d:fe:6e:af:93:e1:76:7d:bf:6d:
9f:d7:90:5f:24:8e:74:07:bb:7c:94:7c:ca:e6:9e:d6:65:ad:
d8:e5:bd:76:cd:2a:fc:b6:d3:7a:7c:42:71:65:49:57:da:79:
71:f0:d7:49:63:43:9e:09:9e:ad:0a:b0:96:d0:c3:53:1a:55:
0d:12:ce:1c:17:0d:ee:58:27:c8:ca:02:27:c6:8b:ff:49:9d:
52:e7:f5:98:2a:2f:13:88:93:d8:dd:7b:16:97:3e:a4:63:d9:
43:10:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:05 2025 by rpki-client