Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/7f03ac7a-8b28-320a-8294-afea39e3db08.roa
File: 7f03ac7a-8b28-320a-8294-afea39e3db08.roa (raw, json)
Hash identifier: 49ENX+IUwYDj+WZBFyklA7H/3Bupews5SqW+UFNuGAg=
Subject key identifier: 59:77:27:3A:E0:24:77:72:37:A9:30:AD:1D:F1:76:62:65:6A:10:2B
Certificate issuer: /CN=d578f033-7588-487c-9d67-16453bc5710a
Certificate serial: 010D0C9F43285848A400BE628355251242389589
Authority key identifier: 01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/7f03ac7a-8b28-320a-8294-afea39e3db08.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 209.142.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:be:62:83:55:25:12:42:38:95:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d578f033-7588-487c-9d67-16453bc5710a
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=1b0ae38b-048f-4c04-b535-c7d640b6e70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8d:2f:a0:d5:ff:38:7b:6e:84:f6:1b:b9:73:
20:66:7f:12:93:cf:26:2e:01:1f:1d:ec:d2:50:19:
c6:c0:0e:0a:7d:f8:49:3f:ab:e3:b1:25:56:ac:12:
f3:19:20:ef:62:d5:fc:a0:69:52:b4:35:e9:6a:6a:
de:01:35:ce:71:21:05:77:d9:6c:57:f0:4a:04:80:
c9:02:01:f9:95:be:55:57:8d:ce:b5:cb:c7:c3:62:
49:3d:c0:72:c4:18:21:ae:12:70:a0:b5:35:25:0b:
dd:99:aa:97:a9:2e:a3:a9:06:a6:b3:5f:d7:16:f8:
09:d8:39:69:63:b7:af:d7:ba:54:63:a7:a8:9d:b7:
90:a9:5e:e9:6a:4a:16:a7:80:7e:66:c0:a1:e7:cf:
93:c3:f2:f9:3c:5a:80:b0:35:4b:13:76:26:ad:3d:
e4:00:1c:c2:53:ac:4f:ad:d6:82:6b:fb:86:9e:bb:
80:0e:91:e4:e0:af:21:6b:41:d5:11:60:e9:93:e5:
db:0f:95:80:61:37:3a:24:c9:c7:dc:1e:81:9f:a8:
56:6b:35:67:ae:97:8b:e6:fc:39:c3:2f:7d:3c:d0:
97:8f:bd:5a:61:82:e8:58:09:40:7a:de:f0:5e:ad:
7c:53:69:a1:b5:30:e9:a2:7f:09:bb:1a:2a:6c:0e:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:77:27:3A:E0:24:77:72:37:A9:30:AD:1D:F1:76:62:65:6A:10:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/7f03ac7a-8b28-320a-8294-afea39e3db08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.crl
X509v3 Authority Key Identifier:
keyid:01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.142.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:80:41:32:41:61:68:c2:56:cf:38:7c:1c:5b:70:64:df:6e:
a3:d0:72:93:05:70:38:e4:9c:f7:8f:ef:b3:ea:02:04:25:eb:
2d:ea:7e:01:91:8e:bf:c9:75:6e:b4:66:33:92:3e:c2:ed:1c:
3f:b4:f2:fd:a7:48:ba:d8:60:27:98:3f:87:6d:6f:58:d9:0f:
7f:9c:7a:9c:5b:6e:3c:f7:f3:54:d8:a9:ac:5e:69:1b:23:ac:
2c:4f:63:4b:ae:04:d1:33:b9:0b:30:dc:99:e6:0d:50:b9:af:
c1:b4:0c:54:54:d8:83:40:13:ed:f5:d3:89:80:21:10:87:94:
74:e0:c1:ad:8c:2e:f0:f6:48:ea:c2:cb:2c:e5:e2:c0:de:bc:
e7:61:c6:05:d1:21:28:da:e9:00:b1:66:bd:83:22:6f:52:47:
11:9f:61:9e:35:1b:fc:54:0e:6b:f6:42:24:e7:81:46:dc:46:
5e:d2:26:cc:94:be:93:cc:ce:18:f8:3c:1d:94:b0:fd:5f:5a:
25:ab:a2:bd:89:4e:51:8c:27:77:fe:fa:65:1d:cd:10:3d:0f:
86:4c:3d:2f:a9:12:0a:70:d2:e9:bd:28:e7:1d:97:57:00:f3:
a1:ea:a1:f1:f6:e8:4a:af:68:e8:f4:4f:b3:6d:37:88:52:95:
46:90:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:57 2025 by rpki-client