Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/5cf69c8b-8b51-3952-8198-776ba3ff74b7.roa
File: 5cf69c8b-8b51-3952-8198-776ba3ff74b7.roa (raw, json)
Hash identifier: 8QrFDXha+O5EiChY9ajOykE45UFvMpw1lwtU3L6gWMc=
Subject key identifier: 0F:BC:E4:3B:C2:F8:4B:9A:52:E5:3B:C0:9B:DD:58:CA:A8:D7:8F:A9
Certificate issuer: /CN=9499abcd-832b-4ba8-80ca-4e0a64b9c987
Certificate serial: 010D0C9F43285848E59BBDC0F2D1801DE335B6C0
Authority key identifier: EA:46:39:64:C9:E9:71:57:C8:FF:5B:E1:7F:61:67:66:71:9F:EA:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/5cf69c8b-8b51-3952-8198-776ba3ff74b7.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16509
IP address blocks: 209.94.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:bd:c0:f2:d1:80:1d:e3:35:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9499abcd-832b-4ba8-80ca-4e0a64b9c987
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=b59ae662-5776-42d2-a41b-3f183feac510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:74:d1:1c:ab:e6:b7:54:dc:b5:8d:0f:60:
1a:94:1f:51:91:92:fd:5c:74:ba:6f:aa:03:b6:6f:
c6:96:43:73:77:0a:90:0a:4e:77:f0:00:20:48:56:
be:fc:0c:86:45:fc:ea:d3:34:7a:75:1e:66:c2:e5:
43:74:90:cd:14:ec:40:a9:10:91:e2:bb:e4:3b:e9:
5e:0b:3f:aa:b7:4f:5d:b5:1a:5b:df:ac:ab:20:8b:
4a:5b:f0:b8:94:09:e6:37:69:ef:da:47:5e:68:42:
1a:03:02:f4:69:d6:1b:69:d8:22:75:e5:12:a2:ae:
13:61:27:a7:2e:cb:26:91:36:fe:ac:c4:74:02:1a:
7f:13:ef:a2:11:d5:26:93:4b:0f:c8:a5:73:5b:a5:
06:8a:04:24:00:c5:88:b1:b0:a3:42:60:f1:cc:90:
68:22:75:7a:50:a3:41:d7:39:06:58:ed:77:3b:fb:
37:33:6f:e2:4b:73:be:85:cd:5a:85:50:35:18:1b:
d1:60:6d:28:1c:b5:b9:de:fc:3f:1a:16:82:ca:5c:
41:22:31:d7:f4:ff:6d:c3:7b:86:3f:30:c6:71:bb:
02:66:d3:92:9a:18:df:b4:6e:62:77:d9:57:79:a1:
3c:0d:bf:21:f1:ec:e2:6f:d7:f6:94:49:7b:12:0b:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BC:E4:3B:C2:F8:4B:9A:52:E5:3B:C0:9B:DD:58:CA:A8:D7:8F:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/5cf69c8b-8b51-3952-8198-776ba3ff74b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987/9499abcd-832b-4ba8-80ca-4e0a64b9c987.crl
X509v3 Authority Key Identifier:
keyid:EA:46:39:64:C9:E9:71:57:C8:FF:5B:E1:7F:61:67:66:71:9F:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9499abcd-832b-4ba8-80ca-4e0a64b9c987.cer
sbgp-ipAddrBlock: critical
IPv4:
209.94.75.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:ad:8e:e6:34:22:62:ad:42:3c:fd:dc:58:a1:8e:71:8d:fa:
7b:71:dc:12:7d:55:79:b2:e4:9e:b7:41:50:99:ba:d7:09:ef:
4d:15:96:3a:4d:e4:ee:7a:bc:65:1d:0b:9b:40:a7:96:64:4d:
0e:94:5d:39:43:6a:a9:ee:2a:09:83:0b:0d:a0:93:15:da:f8:
2c:57:5a:b9:87:78:31:d2:3f:81:9d:d3:fc:b4:00:87:5c:f7:
13:b1:2a:32:18:e4:1d:0f:2a:1c:06:2a:15:05:cb:c0:d4:ec:
20:5a:f2:f5:e9:98:3b:e0:fc:5a:c9:31:34:32:d0:b2:bb:a1:
34:22:7b:cf:4c:81:03:cc:30:66:cc:37:6e:79:6a:fb:21:ce:
b3:31:f7:a5:e8:a5:c9:00:8e:2c:e9:7d:63:b6:ba:62:39:10:
d5:60:83:e8:44:39:98:fc:46:dc:ad:19:db:cb:e9:06:d2:f9:
71:be:b5:c0:a6:f1:9f:57:9a:d8:b8:ff:ba:17:82:43:e0:d5:
d4:cf:8f:6b:85:b7:0c:77:99:a1:b0:72:59:2a:57:b0:fb:97:
e7:bf:fc:76:65:97:9c:d5:1a:47:3a:68:f3:11:09:b8:ff:cd:
99:4d:60:82:00:d1:44:35:ba:c6:f1:df:ba:d5:80:04:98:fe:
cb:00:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:34 2025 by rpki-client