Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/80aad63c-5510-30ce-8c45-a9c1a02f24c2.roa
File: 80aad63c-5510-30ce-8c45-a9c1a02f24c2.roa (raw, json)
Hash identifier: uQR0juEHF9EUVMyKoNDPvd5RPu3rbJXndoQgPS+zEe0=
Subject key identifier: 80:E7:44:58:4B:F3:8B:FD:4B:4F:96:6C:9B:85:65:EC:BA:5B:F2:CC
Certificate issuer: /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Certificate serial: 010D0C9F432858493ED3D4592BF0D80F379EDB80
Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/80aad63c-5510-30ce-8c45-a9c1a02f24c2.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 14618
IP address blocks: 209.127.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d4:59:2b:f0:d8:0f:37:9e:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=7789ac1b-e79e-4e96-8a55-fa29a7822b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:3a:e3:40:53:f1:8c:26:1a:b1:f2:12:d9:
0c:dd:e2:60:5f:96:17:18:1f:f3:6a:53:25:25:da:
08:8c:e5:8d:55:75:e5:6d:e3:ea:64:18:3e:a3:e4:
5d:c7:35:1b:ce:bc:94:d3:2d:cb:44:50:79:9b:51:
ef:b4:61:d5:19:9b:42:af:36:b4:3e:05:45:3f:ca:
bc:fc:51:e2:5a:17:d8:0c:ce:a5:ea:05:ad:2f:f4:
7e:65:43:a9:42:ac:30:25:74:bf:b6:06:27:c3:26:
bf:a1:12:2c:bd:d9:8b:37:39:1e:57:50:95:4d:46:
71:68:0f:66:42:c4:19:d2:62:83:50:c8:a4:d7:b0:
26:63:45:32:ba:58:5b:e9:d0:a2:47:2e:22:7e:a7:
07:23:90:64:ea:0c:7c:1e:1b:b4:76:be:fd:fc:a7:
93:7d:c1:d2:42:77:ba:fb:7e:df:be:8c:bf:2b:b6:
e1:f8:1e:ae:66:44:28:7f:2c:a1:21:38:10:38:78:
72:2b:bc:74:eb:12:3d:87:03:50:8f:9c:82:81:57:
8b:b7:b0:7a:8c:4d:9e:88:56:aa:1f:99:10:cc:ab:
bb:bd:0d:65:a4:12:2d:3c:01:2e:b9:3b:1e:12:1f:
c8:1d:2f:48:f6:0a:c0:b0:a8:7a:23:5a:b7:43:25:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E7:44:58:4B:F3:8B:FD:4B:4F:96:6C:9B:85:65:EC:BA:5B:F2:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/80aad63c-5510-30ce-8c45-a9c1a02f24c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl
X509v3 Authority Key Identifier:
keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
sbgp-ipAddrBlock: critical
IPv4:
209.127.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:d6:c0:f7:9c:f1:c4:c1:ce:cb:6f:ad:4f:b8:87:50:6c:dc:
0e:27:f1:22:c3:40:88:4c:5e:19:39:f2:08:f9:bf:3f:61:ed:
ff:d5:41:90:3b:37:1b:83:52:af:3a:8b:76:38:32:69:2f:a1:
bb:46:39:90:c4:51:52:b9:bf:81:e3:7c:c8:db:c7:8f:0c:56:
d5:97:fb:e6:86:f4:80:54:cc:d7:e4:f5:df:cb:ec:80:ac:f4:
2a:89:2d:75:ed:df:7f:6f:dc:0c:d2:cc:c6:7d:fb:f3:93:a8:
c4:ae:8f:48:07:7d:d2:c8:3f:fa:75:20:00:92:9e:4c:a2:7f:
82:d2:33:34:b5:cb:47:73:92:36:c0:3c:e0:5b:c2:b8:9e:bd:
84:cc:9d:38:6f:82:01:4a:d2:49:ee:e7:2f:fc:3f:e1:5c:de:
d6:4a:9a:cf:7f:01:42:b2:43:bf:02:34:fd:09:44:50:ee:a8:
c2:41:ce:e9:90:e0:25:fd:ba:f0:d7:5e:f0:82:59:99:10:40:
46:5c:2e:55:ad:49:31:fc:7a:9c:ae:37:76:df:85:bf:d3:ef:
96:3a:56:f3:0f:6c:4a:ba:c4:2f:56:ab:94:a1:ff:3b:75:f8:
e5:00:ad:34:e4:81:e0:38:bb:aa:fd:c2:15:ee:02:65:05:e4:
58:93:c9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:35:52 2025 by rpki-client