Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f022388c-d4c8-376f-a3a7-b868e2f1eaa4.roa
File: f022388c-d4c8-376f-a3a7-b868e2f1eaa4.roa (raw, json)
Hash identifier: YLNshI/KO4AV8Pc18Eij5HqhQGYzUIWcd1B47aaZPYA=
Subject key identifier: 75:84:B4:7B:86:6F:EB:97:02:89:CE:A9:A3:12:20:D2:94:EB:CD:1D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B77D88DA314CAB97BCA100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f022388c-d4c8-376f-a3a7-b868e2f1eaa4.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 855
IP address blocks: 209.128.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:7d:88:da:31:4c:ab:97:bc:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=9ab3b5f2-f7b0-4e39-843a-3253b07951f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a4:fb:ff:d1:12:61:52:b3:e5:6a:b4:e9:7c:
4d:73:70:68:af:08:9a:0b:f7:3a:08:0b:e4:ac:2f:
22:23:75:ca:cd:94:f4:65:b1:5c:78:f3:f4:0a:b0:
9c:55:6b:77:2b:eb:8e:c5:1c:21:60:be:8d:88:36:
4e:fe:57:cf:4d:1f:c0:dd:30:05:a1:86:ee:33:a1:
11:52:b7:55:86:c3:4f:68:5b:e6:bf:0e:e8:5c:97:
d2:28:70:7a:d1:1f:ce:c1:b1:5b:1b:43:df:3f:8a:
3e:e1:96:e3:e4:22:59:dc:c3:ee:5f:a0:5a:1f:b3:
d3:e4:93:7a:44:e3:d1:72:90:cf:57:c2:bb:91:15:
8c:51:2a:ce:37:3d:c1:50:83:93:ba:c8:c3:52:97:
0f:eb:bf:f5:d7:f8:70:b8:d6:11:bf:1b:37:86:ed:
90:4e:f7:3b:76:0b:eb:93:81:f9:76:ec:a0:d3:59:
13:29:30:65:45:9b:a7:a3:28:0c:b8:9e:80:b4:d4:
1a:59:32:e2:10:a7:fb:6c:21:f7:42:8b:a1:63:b2:
c8:39:83:df:0b:e4:1f:07:74:10:d4:82:a7:d1:c5:
5c:cf:b0:58:30:ba:82:9e:cf:6f:c7:87:7c:6b:c5:
86:d1:8a:7b:8d:df:3a:9d:74:19:c6:f7:97:c9:29:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:84:B4:7B:86:6F:EB:97:02:89:CE:A9:A3:12:20:D2:94:EB:CD:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f022388c-d4c8-376f-a3a7-b868e2f1eaa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.128.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:08:46:71:72:b4:5e:dd:8c:02:98:8c:8e:75:f3:fc:9b:29:
73:bd:26:5f:5f:fc:d3:45:fb:02:e0:07:28:6a:b8:21:fd:b2:
07:46:7c:fb:5b:e3:19:c6:ad:ff:ec:f5:b0:56:4a:4e:4a:e2:
52:7f:dd:45:fc:dd:fd:ad:45:f0:e4:5c:b9:a3:2c:d1:01:58:
cc:fc:74:7d:0c:ba:78:20:86:3f:67:51:fb:04:40:5d:b7:49:
fb:19:26:cf:ae:99:a7:27:d6:a6:68:19:b6:db:b7:12:06:0b:
4f:dc:18:bc:3b:15:c2:bc:40:e3:a7:72:1b:cc:e1:e3:35:fc:
33:2f:37:7a:5b:e3:2c:65:07:cf:f6:02:87:9f:52:c0:d6:51:
52:6b:c5:94:f6:f8:5c:cf:32:26:d6:fe:7e:2b:dd:6f:72:ee:
a6:ef:cf:9e:67:d4:7b:a7:82:2d:6a:50:44:73:8f:05:39:7a:
5f:a0:60:6e:99:77:a6:0d:fa:4d:50:6d:9e:09:4e:14:b9:04:
1c:85:f5:99:4d:1f:1b:bf:e8:3c:ee:1a:68:a2:4e:8f:81:e8:
d1:15:d8:8d:e8:dc:f1:c3:1b:8b:08:da:f1:4f:e4:72:4c:8a:
6f:93:6e:e9:42:68:58:eb:33:36:81:3b:83:6b:9b:b0:a7:f5:
32:d4:6c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:39:37 2025 by rpki-client