Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/1ea1e11d-1e69-31f2-901e-8f79bf7ff187.roa
File: 1ea1e11d-1e69-31f2-901e-8f79bf7ff187.roa (raw, json)
Hash identifier: zqK7+DxfXVm3MRVJyh3adV86tzmj6baHG1EJB1EEMgg=
Subject key identifier: D9:7F:5B:5D:C8:7A:61:66:B7:00:4A:D5:AE:01:05:14:5D:08:4F:2E
Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3
Certificate serial: 010D0C9F432858493C09210973F1599C4E823700
Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/1ea1e11d-1e69-31f2-901e-8f79bf7ff187.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 62856
IP address blocks: 209.112.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:21:09:73:f1:59:9c:4e:82:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=098cd137-62e9-410b-9aca-cd53e726750a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:38:f2:22:e4:99:9f:9f:71:57:21:40:a9:72:
d0:0b:e7:94:8d:44:d2:01:94:ad:4b:da:23:11:d4:
1c:c8:68:99:59:7b:7d:f3:1e:97:03:1a:5a:cd:86:
6f:6d:24:e3:6c:31:53:57:9b:bc:b6:a9:1e:d6:a8:
58:4a:7d:40:2c:05:92:3d:9a:51:09:d0:e4:f4:38:
58:49:2f:f3:49:1b:e4:a1:78:2c:f0:f3:9a:67:90:
c4:33:32:46:06:b0:9e:4d:5d:a0:db:3f:ac:8c:49:
b9:7a:88:52:39:46:d4:e3:cf:b1:48:37:86:64:91:
5e:2d:41:2b:95:51:e3:e7:f8:16:8b:41:ff:af:35:
1d:2c:b3:f3:30:a7:cb:62:15:87:b4:12:b7:ec:80:
72:64:b3:a1:2f:ee:a0:7f:23:66:12:30:42:27:e7:
62:f1:86:b8:73:06:4d:da:cc:19:3a:75:a6:9f:7c:
0a:c0:c3:81:e5:b5:a4:ea:4a:44:f1:51:bb:d3:71:
bb:23:10:b3:05:93:c1:cf:5b:10:aa:69:9b:2c:9d:
29:88:1d:32:fd:ee:ed:96:fd:47:95:26:aa:a8:07:
36:86:cc:a5:19:db:df:a5:21:4d:dd:52:d1:46:4c:
9f:0d:65:2c:a0:4a:e9:19:87:83:3e:0b:74:42:b0:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7F:5B:5D:C8:7A:61:66:B7:00:4A:D5:AE:01:05:14:5D:08:4F:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/1ea1e11d-1e69-31f2-901e-8f79bf7ff187.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl
X509v3 Authority Key Identifier:
keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:00:1a:15:36:f2:c7:da:b0:29:f8:a5:3f:55:24:7a:83:bd:
4a:87:3e:86:75:dd:6f:b6:e9:67:d4:2e:d4:45:3f:49:c2:a8:
22:76:85:04:b1:85:b6:9e:21:4f:d4:0c:23:01:57:3b:a7:be:
74:3d:3e:7b:01:79:91:3e:d9:90:85:3f:47:e7:29:2c:31:23:
83:07:c5:76:60:0e:73:b1:ff:58:ca:99:ec:b2:f1:2f:26:a8:
ce:00:5f:b2:99:88:90:2b:fb:22:62:3b:00:65:e7:0d:75:73:
57:7a:86:35:25:57:50:e2:bc:c6:e1:90:a2:a9:7d:6c:79:f7:
ab:44:42:56:35:86:c6:3d:b2:cc:07:f6:30:7f:7d:67:59:5a:
71:05:ef:a1:62:7c:6d:7e:63:eb:d8:9b:e2:12:01:96:02:b0:
89:f2:bd:60:5d:b1:76:5e:da:55:b0:38:09:7f:86:0a:ea:78:
59:2f:f3:47:03:8c:1e:96:17:f9:3b:89:0b:f0:db:fd:c4:48:
45:95:c3:0d:20:8b:e7:73:67:31:92:4d:dd:b6:3e:f4:40:d7:
a7:d2:1c:97:42:c3:be:2f:3b:7e:22:67:f6:34:69:8a:7a:a4:
92:43:62:ff:18:43:ab:99:67:d7:c2:a0:cb:9e:09:7d:e8:97:
51:1c:6a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:18:33 2025 by rpki-client