Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa
File: 65d11a05-2769-3f82-a107-6def6f4c6ffe.roa (raw, json)
Hash identifier: RiTbRIcYNaXDsPPTzD6zxJGW9BYn8sC8N0740RI/FSo=
Subject key identifier: 5A:63:BA:02:4B:91:30:8E:69:65:BD:C0:79:73:18:31:F3:97:B9:3D
Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial: 010D0C9F432858491ED6E9AC883246E70D95C500
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 209.169.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:e9:ac:88:32:46:e7:0d:95:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=9a7796ed-a790-4ffa-b2db-ab340d3df9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:59:51:c9:48:36:b5:ca:08:ba:49:4a:3b:
19:69:4a:4b:bd:92:90:87:65:2e:86:0d:0d:dc:11:
40:84:6e:5b:23:8b:1b:20:75:87:7e:08:ce:5d:6e:
5c:0c:17:66:90:fa:67:db:86:33:af:f2:67:04:1c:
c4:e3:81:e4:d1:cc:e3:30:61:a4:41:07:39:d8:de:
94:ef:c2:3c:a5:0c:66:4c:55:63:4a:a1:f6:db:d5:
be:0b:80:b1:63:73:76:f4:00:c3:d0:c3:e8:9e:08:
58:40:6a:0f:cc:87:a4:89:0a:0e:5e:24:a8:ba:5e:
b0:c3:28:90:3a:c2:4a:2a:0b:dc:4a:1b:f6:b5:1c:
3b:9c:ab:e8:87:b9:29:be:d6:fc:54:97:bd:22:8d:
ae:ff:1e:8b:80:78:24:87:97:18:f9:ad:09:37:2b:
d3:70:8f:0c:9e:ae:51:7d:fd:a0:bc:10:ce:12:e8:
0e:5b:25:7f:24:7f:62:b9:d0:ae:d4:1b:4e:67:0c:
c1:d0:5d:a2:d8:1a:e9:f7:99:1c:d8:7c:a0:80:60:
f0:3b:b6:4e:dc:16:de:e0:2b:70:a6:f7:e8:9f:f9:
a0:8c:3b:63:6d:42:eb:18:1e:64:a4:ce:aa:79:36:
8c:7f:01:ae:41:fc:b0:bf:f1:0b:45:d3:0c:76:62:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:63:BA:02:4B:91:30:8E:69:65:BD:C0:79:73:18:31:F3:97:B9:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/65d11a05-2769-3f82-a107-6def6f4c6ffe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
X509v3 Authority Key Identifier:
keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.169.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:b4:48:ea:dd:e6:82:6f:46:a0:f3:3b:be:cc:87:94:a2:85:
8d:47:bd:dc:6f:35:48:56:47:1f:39:88:94:7a:ee:a2:46:ed:
4c:cf:a5:e2:21:32:99:70:ec:2f:bd:f5:0f:fd:79:be:46:93:
e0:75:58:f3:6d:44:13:5e:4f:40:40:8d:1d:a6:97:c9:fb:51:
60:4d:53:8d:d4:6c:17:98:03:59:e7:91:9e:9c:86:17:6d:5b:
b1:6e:5b:cd:94:ab:95:44:56:20:1b:21:72:62:03:98:fd:fc:
65:64:c3:c7:d1:38:c0:04:90:49:e6:07:e5:4a:14:c2:19:10:
e5:14:5d:15:a4:32:67:9f:ec:3d:bf:15:55:ae:d8:84:4a:21:
ce:3d:df:c1:88:1a:be:8d:63:7e:84:30:1c:0f:9f:76:5e:85:
b3:c7:76:73:e5:7c:8b:14:6d:15:54:fb:d8:51:86:8b:82:ac:
b4:fe:fd:2f:a1:34:8f:18:76:6f:e9:74:f3:a2:aa:66:d5:bd:
d7:cc:e8:19:03:20:9f:7c:b2:6c:4c:dd:7e:e6:70:66:26:28:
5d:a6:80:33:e6:d5:0f:17:08:7c:27:ce:c8:1a:4f:2d:18:f5:
71:cf:34:be:bf:b4:4e:ea:93:93:89:00:78:63:03:cd:9e:c6:
5f:74:8e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:03 2025 by rpki-client