Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2f587009-073f-3211-bc8d-0e9ff0a03ec3.roa
File: 2f587009-073f-3211-bc8d-0e9ff0a03ec3.roa (raw, json)
Hash identifier: waE1QhFgA0eylxIgv8bll0ixTYOBOBW7KpWIaMBwpNo=
Subject key identifier: 40:FE:D6:88:AE:D1:FE:F4:9A:01:E2:48:45:C1:E4:E2:EA:FD:40:9E
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584894A5E343092069AD62871179
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2f587009-073f-3211-bc8d-0e9ff0a03ec3.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 20473
IP address blocks: 173.239.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:e3:43:09:20:69:ad:62:87:11:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=e4d2d437-9c12-4058-beeb-4ffb80684ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:32:a9:11:f5:a4:ce:00:cc:44:07:7a:69:
8c:a7:04:4b:ef:6c:56:7f:4c:85:80:de:89:4d:18:
f2:40:99:ce:ea:28:6a:07:bb:c1:7d:89:67:88:a8:
37:69:f5:1c:9e:07:63:af:dc:a0:be:4b:e6:82:3a:
a2:73:91:55:a9:12:be:b1:0c:f8:ad:25:1d:36:c0:
0c:34:21:69:1a:a7:df:d1:22:10:d3:60:d7:b9:b3:
9c:db:fc:e2:f0:06:78:cc:c9:13:00:33:9a:fa:6b:
89:97:09:81:7a:a2:57:a3:b7:d5:af:40:54:db:37:
89:9d:24:c4:42:b6:20:78:1d:0c:33:bb:df:2b:1b:
eb:6b:96:7d:e8:f6:a3:14:e8:41:83:f1:11:83:cf:
d2:02:53:c1:25:c7:c5:f8:80:69:94:17:a7:11:c3:
85:30:3a:cc:73:d2:2b:43:dc:18:34:9e:fc:55:00:
48:1d:0c:a7:d8:ef:14:e2:0a:09:43:92:65:6e:a2:
06:d9:69:f4:0d:d7:03:9c:93:4e:10:a2:ac:df:6c:
2c:9f:8b:19:37:6c:cc:7f:ed:18:7f:eb:2e:ec:34:
3a:ee:c9:08:14:8d:60:0f:a3:24:55:e3:8d:23:3f:
fb:1c:15:ba:4e:e8:88:6f:61:f6:32:cb:77:3f:67:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FE:D6:88:AE:D1:FE:F4:9A:01:E2:48:45:C1:E4:E2:EA:FD:40:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/2f587009-073f-3211-bc8d-0e9ff0a03ec3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:90:40:2b:ca:24:48:9a:fd:d0:8e:0a:a9:b3:c2:a8:f9:00:
6b:ef:8f:cb:68:14:c6:88:a4:f5:c9:2a:4a:42:0a:41:ce:cf:
d9:d0:22:cf:d2:28:17:c2:88:4b:60:0b:13:fe:8d:e4:43:30:
4a:79:1c:a9:50:bd:1d:7a:b6:f7:a9:df:e3:fb:84:b4:6c:b1:
b8:c6:ca:c8:ec:3c:bd:b3:62:cc:5c:fa:2f:20:e4:15:22:5d:
41:78:11:6d:4f:ac:e7:e6:3e:9b:6d:9a:b2:eb:32:c8:cf:27:
03:be:12:43:c6:86:a5:2b:d7:e9:0b:b5:80:69:9b:f4:52:a8:
c7:86:64:b9:a0:fc:e2:12:1b:99:86:35:87:91:68:cc:93:de:
a7:e2:78:34:48:4e:99:26:d0:d9:0d:9b:c0:8b:06:81:f5:69:
11:64:cd:ae:d2:61:34:a1:66:e0:b4:6e:e1:39:ff:0c:f1:33:
00:e2:4a:e1:e4:f3:cb:6f:a6:c3:eb:e2:8c:3a:c7:cd:15:28:
40:80:e1:2d:15:22:33:05:e7:d7:64:8f:36:e4:dc:fe:fd:30:
f8:6a:28:0a:8f:cb:8e:cf:0b:3a:f9:d2:7e:b7:b5:95:82:36:
87:44:6a:46:73:ff:6b:2d:1e:d5:d3:1c:aa:b5:32:97:75:36:
2f:70:34:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:21 2025 by rpki-client