Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ac0d01d7-bbdb-3c5b-bce3-bf84fb09558a.roa
File: ac0d01d7-bbdb-3c5b-bce3-bf84fb09558a.roa (raw, json)
Hash identifier: ZtTg1icOvtFEKk4se9gjQOlTK0ZAnw0C8uXgikkjcFI=
Subject key identifier: C3:AB:D3:30:B4:CE:8C:EA:94:0C:98:FF:B7:FA:17:81:50:28:D5:6D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E320ADABC23F5C730A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ac0d01d7-bbdb-3c5b-bce3-bf84fb09558a.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397228
IP address blocks: 209.173.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e3:20:ad:ab:c2:3f:5c:73:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=b697dc1e-e064-4fa0-878e-85085e6f36ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:04:b8:cd:e7:a9:00:bc:ae:05:8f:43:33:53:
5a:04:4b:c7:da:c1:ba:5d:bb:52:40:b9:a8:ed:76:
f4:af:f3:32:6f:f4:ab:42:9c:50:96:1f:d0:c8:71:
c4:22:10:1d:18:22:f1:0f:d8:8c:3c:57:84:63:5d:
03:64:b3:17:45:66:2b:ee:6f:9d:9d:29:be:73:da:
dc:e5:d9:fe:c3:5c:e1:1c:a2:09:5e:a0:3d:2d:60:
9d:3d:96:cb:6d:eb:7c:56:ec:9f:6c:61:4d:d2:81:
a3:da:8b:bc:22:21:f0:d4:9b:89:ae:1e:4b:99:3d:
4c:c4:de:71:c2:e4:3a:12:05:c1:78:b3:ac:27:b4:
11:0e:41:1d:7c:a0:6a:0a:2e:26:5f:7c:7c:c0:ce:
a9:c5:52:63:5f:6f:9b:34:77:38:a2:3e:1d:33:72:
2f:50:a8:c2:8c:d6:ac:87:84:e3:4b:69:45:f9:16:
db:f8:14:77:5d:55:a1:4d:65:16:3a:8f:26:68:df:
35:3c:a3:e2:9f:1f:bf:e2:81:17:f2:64:c2:2e:2b:
40:32:a2:bf:ee:84:01:9a:d0:08:e2:ae:40:ef:f3:
26:93:b2:18:52:f2:79:09:64:6a:a1:1c:f2:03:fe:
37:f6:ba:52:8b:9f:ba:20:dc:9d:50:06:91:47:92:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AB:D3:30:B4:CE:8C:EA:94:0C:98:FF:B7:FA:17:81:50:28:D5:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ac0d01d7-bbdb-3c5b-bce3-bf84fb09558a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
209.173.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:0d:d1:9a:d3:15:f8:e8:53:e8:b4:76:72:49:5c:62:28:60:
c6:e9:7a:d5:1c:22:2e:2d:d9:15:89:17:9b:14:28:94:ab:36:
df:a2:42:87:51:b6:dd:e5:c4:3d:1f:ec:ba:1d:22:a6:7f:09:
3f:f0:bb:c7:bc:34:d5:90:37:eb:33:7f:be:01:42:29:6d:2a:
8a:68:dd:e3:4d:12:95:a7:61:62:52:3d:46:bc:aa:25:c8:5d:
2e:7b:bc:a2:93:72:f0:87:c3:66:24:d7:13:ea:9a:cc:fe:cb:
04:97:37:28:92:27:6e:f0:1d:5e:a6:a9:ea:97:3f:49:b3:6c:
a1:9b:ef:67:67:b7:ca:a1:a4:09:76:12:4e:67:a6:d3:8c:69:
35:97:06:43:3b:84:a4:96:f9:ca:7a:69:3d:99:cf:91:3f:e7:
84:55:37:ad:63:22:f6:ee:7a:be:79:a3:4d:aa:0c:37:9b:37:
01:ae:5f:d8:90:87:46:60:b9:e2:6d:12:37:e8:d1:59:5f:2c:
56:6c:ca:49:d2:9d:1c:c5:b9:18:69:02:8e:a2:11:fa:03:6f:
6e:80:08:7f:88:bd:2e:f0:a0:0c:bc:e8:8b:01:08:5a:d5:9f:
d4:ee:2e:32:9f:01:d3:b1:fa:a6:62:3a:15:e1:5a:77:6b:7b:
ce:d0:a6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:30:17 2025 by rpki-client