Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa
File: 6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa (raw, json)
Hash identifier: VltLrqCvjlaJ8zSyb8L+fcWrULCxMNZZ2uh03msryV4=
Subject key identifier: 37:7E:D1:72:6F:A1:D8:21:88:C7:22:D3:FF:FC:40:99:99:CA:49:D5
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858491AA6CF2501C7B8F810E07380
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 394708
IP address blocks: 209.173.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:cf:25:01:c7:b8:f8:10:e0:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=675a0e2d-6009-4861-a04f-3c5630ae16ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:9b:b4:9e:bc:a1:25:d6:0a:10:03:fa:a4:
e2:37:55:5e:d7:5e:61:c2:41:b1:de:0b:a6:09:38:
b9:b5:97:77:10:cb:a6:e5:98:d0:4e:4c:29:a2:0e:
46:b9:4c:c6:af:92:e0:81:8e:3e:e1:18:53:5a:f7:
a2:00:a7:4a:33:2a:93:e8:de:a3:42:2a:c9:72:af:
a4:59:a9:99:48:ae:82:5b:57:0b:b2:0e:e3:0d:62:
38:3d:80:c3:dc:85:43:18:85:b6:e0:d4:d6:9a:50:
01:89:4e:01:fb:a4:42:6c:26:0b:04:57:d7:a8:e5:
ab:3d:4b:30:da:ba:7a:45:cf:87:17:58:a5:84:92:
bf:96:75:b8:cc:f5:d1:36:1c:26:59:5d:dd:2e:b3:
d7:77:89:12:76:10:95:c9:39:b3:d4:0e:f3:0f:c4:
4f:c2:35:c9:a4:66:4f:51:28:10:4e:fb:cc:b7:60:
06:aa:6f:e5:b6:44:90:57:cb:81:11:a6:da:e4:84:
6e:66:59:bb:42:81:27:e7:60:4e:3f:ae:9d:aa:88:
ed:fe:5d:b7:30:88:5b:6f:bd:85:f5:23:50:fa:c7:
b0:cd:01:70:4d:5c:93:44:8d:39:bf:78:c3:fc:49:
f9:e0:4a:d6:21:8b:5e:2b:57:6d:87:5c:19:93:68:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7E:D1:72:6F:A1:D8:21:88:C7:22:D3:FF:FC:40:99:99:CA:49:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
209.173.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:18:2e:08:e3:9c:5a:23:46:00:bb:a4:9a:13:94:eb:08:cc:
ed:8f:b1:9f:04:07:2d:53:53:a0:75:c6:ad:4d:8e:f3:53:a1:
f0:ca:49:d3:41:56:c0:13:22:12:6a:15:ae:d2:e0:f6:60:2b:
1e:a1:ce:56:23:1d:ae:88:79:4c:d1:cf:45:e6:20:68:f3:ea:
cf:e6:d7:60:e8:90:e7:cf:94:35:51:a3:39:8a:db:cb:79:94:
88:58:d8:db:53:cf:ec:99:51:4c:bb:ac:18:f2:ae:40:40:53:
f5:f8:64:b8:79:05:14:22:8c:e4:36:4d:2d:d7:0e:71:b5:4f:
f6:a6:a4:2e:e7:ce:76:d0:c8:37:4c:78:af:17:ad:9b:16:17:
fd:ff:3a:4c:34:cc:50:44:a9:1c:cf:55:65:61:7f:88:45:06:
0f:9f:49:cd:ad:97:e5:de:83:b3:19:30:bc:76:b3:41:41:b4:
1b:32:20:02:ae:ad:bf:b9:52:48:53:bc:c5:55:0f:1e:4a:6d:
38:9c:b5:0d:80:16:e5:19:ba:d5:8c:ee:8a:26:3c:da:46:8e:
20:da:2a:7e:3c:d5:bb:6f:67:7b:65:73:99:a3:b9:0e:78:76:
35:15:31:b3:51:98:34:b7:5e:aa:03:e6:f6:87:54:c2:96:e0:
e3:01:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:45:54 2025 by rpki-client