Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa
File: ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa (raw, json)
Hash identifier: cjWRQMjFYsj+EY+mRlbjrnYVY/t+BefAyAIi20fZbVc=
Subject key identifier: 4B:4D:17:A6:30:9D:95:C4:0C:22:0D:4A:5F:D8:34:AC:15:BC:45:CA
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F43285848897B218DF2301C9A32ACFC00
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 2153
IP address blocks: 209.129.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:21:8d:f2:30:1c:9a:32:ac:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=75e15cef-f392-4c22-ab71-f15c2bd1d03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:15:8d:d4:95:1b:ee:5a:36:8f:f4:1e:2c:
25:01:e5:51:4c:35:a5:35:b2:b4:c7:90:3b:55:03:
9e:86:3c:9c:fc:84:32:ec:36:8f:c0:ba:2a:75:4c:
61:a8:43:3d:2e:9a:ef:77:e9:e0:29:ce:a2:ec:89:
70:5f:90:94:bc:8f:2f:0a:1b:95:02:18:55:ec:84:
45:07:9b:fe:0d:e9:17:f2:bb:de:4f:37:da:e1:3a:
de:af:65:0a:9a:3a:4a:9c:ae:32:38:af:41:00:4a:
bc:96:fc:f4:a3:01:ec:f7:e4:c4:1f:9b:c1:9d:08:
9f:b6:48:74:02:63:55:c3:0a:db:0e:6f:22:2a:61:
19:d8:77:47:d9:21:cf:04:07:f4:33:58:13:5f:f1:
6d:4b:b7:c9:4b:88:71:e9:cd:4e:a7:65:54:d1:c1:
97:fc:42:4e:d1:02:7c:63:74:05:c5:fa:a4:cd:e3:
ae:66:e1:87:18:8d:29:88:f1:e0:96:b1:fa:d0:87:
cd:19:82:37:6d:6d:ee:ce:5a:93:08:d3:12:10:04:
f8:3f:6d:fc:b9:4e:44:fd:26:c5:0b:f3:1a:fe:06:
60:d6:d0:6b:b4:0d:78:89:71:0a:2e:58:d3:3d:c2:
06:b0:9c:f0:78:55:a8:36:be:18:3a:0b:8e:30:57:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:17:A6:30:9D:95:C4:0C:22:0D:4A:5F:D8:34:AC:15:BC:45:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
209.129.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:7e:7c:b0:be:36:62:9d:2b:73:9c:94:71:de:39:09:02:a8:
dc:73:08:f4:42:9b:49:e6:65:cf:6e:fa:cd:81:e0:ef:11:44:
35:15:ed:fc:94:76:90:00:6e:48:32:61:18:6b:30:68:4d:be:
1b:97:e7:68:a9:3e:6d:b5:b0:d8:96:62:68:c6:4f:0f:7c:f9:
63:d7:74:d1:d5:c3:87:b7:70:3b:d7:dd:ad:81:1a:8c:ae:96:
77:a7:bf:d0:15:d0:5d:e4:66:29:74:79:41:7f:75:2e:a2:9d:
15:c5:7c:3f:e7:33:e9:81:3e:79:6f:0e:ee:df:06:ef:0e:b6:
dd:2b:f6:e3:7d:4e:9b:69:08:d6:b9:9e:04:4e:af:3f:44:58:
b7:86:ce:7a:d3:50:f7:b7:bc:28:03:cb:8b:20:4a:a2:7e:7d:
8a:0b:6d:86:4b:ce:91:1d:96:79:84:8a:6c:92:9e:33:9d:4f:
8a:b6:c7:45:c1:6c:85:e3:67:23:6b:a2:6a:49:0c:0f:e5:87:
b1:c4:cb:e8:c6:90:a9:a7:de:04:96:36:d9:48:93:83:81:12:
0a:32:2d:aa:76:df:71:71:d5:95:a0:de:95:4d:d2:13:51:d0:
c4:ea:55:9e:d2:f6:b4:f1:55:37:2b:27:a9:89:e4:82:94:80:
43:40:6f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:02 2025 by rpki-client