Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a136183e-96df-3ef3-9320-132a565cb3ee.roa
File: a136183e-96df-3ef3-9320-132a565cb3ee.roa (raw, json)
Hash identifier: /yxRl01xvoZg/gDQVCzd6xJ+2P2MQtuznJ3eOluu7mo=
Subject key identifier: 5F:0A:A0:A3:A4:79:29:BC:2D:B9:C5:A6:C7:FB:9D:8F:49:91:E8:EC
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F43285849244E81A705A4A12C41EA7500
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a136183e-96df-3ef3-9320-132a565cb3ee.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 36231
IP address blocks: 209.237.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:81:a7:05:a4:a1:2c:41:ea:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=ae033134-d287-46eb-bab2-60ed1ed36b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:0f:4d:75:45:74:96:05:56:4f:86:f4:a5:
8d:c9:1c:c2:c7:0e:60:d9:ee:d5:83:9e:99:8a:d4:
2d:46:f5:5e:f2:6d:70:11:de:66:ce:6d:79:b4:5d:
cb:65:d5:05:86:ce:66:41:e1:ee:9a:71:32:69:f4:
0d:d1:c6:52:a4:b9:38:55:9b:54:79:6d:ce:ae:4e:
ac:4d:90:83:75:d5:c9:3d:7b:8b:44:a7:cb:09:4d:
10:ab:35:9a:7d:fc:87:4b:32:82:f5:38:13:57:a9:
cb:88:d7:4c:b2:cf:a5:f1:16:63:89:fa:91:a0:f2:
08:c4:8a:f8:78:a4:a1:cd:ec:89:25:5f:6b:fb:12:
ad:8b:e0:2b:d4:8d:85:ad:e1:f8:7a:37:5e:f3:14:
cd:db:3f:62:2e:e1:34:94:c0:e9:62:eb:89:53:fb:
77:b6:d5:15:a6:0c:c1:c9:14:4a:d6:85:1a:f1:ab:
ec:92:07:00:af:9d:29:8e:19:2e:e9:5f:41:2a:9b:
78:f9:13:e0:e8:07:bc:ae:56:1d:43:ff:c8:f8:2a:
1a:47:79:96:cd:52:43:dc:c0:6b:89:70:35:11:6d:
57:df:f3:59:2d:a2:86:63:00:46:20:78:52:9d:64:
93:37:2b:5f:5a:f2:61:42:db:74:62:48:b3:53:ff:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0A:A0:A3:A4:79:29:BC:2D:B9:C5:A6:C7:FB:9D:8F:49:91:E8:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/a136183e-96df-3ef3-9320-132a565cb3ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:f0:ac:6a:f8:b8:21:b6:cd:c8:d8:c9:17:87:4c:44:82:f4:
68:ab:34:c3:fc:c8:13:82:d6:2a:50:96:ff:9b:c2:03:aa:a5:
a6:b3:21:b2:fa:28:9c:7b:23:00:2a:4e:09:3c:bf:15:6f:a4:
39:64:f3:49:6b:96:9d:ae:6b:6d:2a:79:ec:68:0c:54:f9:e4:
7d:7e:42:21:f4:96:dc:51:f6:74:89:56:96:d7:2f:92:1d:bd:
12:6a:60:03:60:17:6e:34:4c:f6:03:f1:df:3b:c9:19:0e:54:
43:f3:36:3b:bf:8e:c1:15:53:61:f0:ce:c3:de:e4:53:4c:de:
be:7d:56:38:0c:0c:21:fd:18:d9:46:6c:47:63:80:89:66:e6:
0c:55:b7:3e:42:f1:3c:6f:5a:4b:41:26:fe:ac:59:eb:6c:8d:
3a:66:6e:a8:2e:07:70:ff:be:06:28:bf:71:08:74:a1:55:a7:
11:4b:6b:b9:0b:c2:a4:33:ee:e3:d8:98:a5:31:4b:e3:a8:52:
d4:3d:56:6b:cc:d4:1f:60:35:a0:94:94:93:80:27:02:17:c6:
fa:5d:8d:6d:f3:08:40:54:3b:84:dc:c1:1a:33:7f:44:6c:34:
44:4e:74:59:4c:11:db:9d:37:f7:42:e7:cd:8f:97:44:7b:8f:
9f:60:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:22 2025 by rpki-client