Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa
File: 89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa (raw, json)
Hash identifier: PHMfk8xKE0V3qe2ZSeR9mTQJkzNgXvZnRkzk73c9E14=
Subject key identifier: 61:AF:5D:68:44:F5:A1:56:0E:64:C5:34:11:23:00:6E:CC:14:A9:E7
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858494CC94032BAA0FAE100BA22B0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 13414
IP address blocks: 209.237.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:40:32:ba:a0:fa:e1:00:ba:22:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=fec666c1-cb9b-49aa-9b83-f6d4dcadfd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:4c:63:02:f1:8b:d7:25:e9:e2:c5:aa:b2:
0c:45:49:9e:a7:aa:c4:e5:4b:11:da:cf:8f:42:89:
04:9b:35:35:e4:a2:92:7c:83:cb:49:ff:cd:96:fe:
ac:ac:de:2c:1a:99:6b:56:b7:88:71:32:30:c1:92:
6b:7e:0b:27:df:59:3f:6b:5f:70:d5:5f:bb:b9:00:
f5:d9:f5:a6:67:2c:00:43:f5:91:15:d0:46:26:fd:
1a:83:cc:c7:06:8c:3b:c0:83:75:7e:8e:75:db:a1:
8d:c8:bf:5d:82:c0:f7:77:2f:c2:dc:7a:6d:0f:28:
ba:d1:f5:86:d5:c1:d6:69:a3:62:32:17:1d:2d:50:
df:81:32:46:78:97:f2:7c:09:8f:91:07:aa:d5:86:
3a:0f:cf:4c:98:77:6f:68:7c:c5:9e:13:34:82:65:
9c:93:a6:f3:d7:5e:a5:b5:4b:63:cb:5c:5d:37:72:
4f:9c:05:77:7b:ee:9c:78:0e:64:7e:61:89:93:88:
1b:5f:85:6f:95:c3:60:bd:6d:e3:a2:e5:ec:93:0f:
f9:0d:d8:fe:b0:07:83:5a:f4:70:80:b6:f1:f8:39:
61:b1:0b:cf:cf:3e:4d:48:5c:c3:d8:e6:7e:e2:ac:
fb:1a:11:5a:cc:03:e2:55:db:46:5d:86:a2:15:6b:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AF:5D:68:44:F5:A1:56:0E:64:C5:34:11:23:00:6E:CC:14:A9:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/89b30dd2-323d-3aab-a8d9-c01b887fbf65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:f5:28:ce:4d:5d:a7:fd:7c:70:db:e7:8d:9a:0c:b2:a3:ec:
8f:ec:74:30:a3:38:c2:47:c9:48:40:03:6e:ff:04:49:55:b0:
db:07:97:10:25:85:f9:6c:68:35:60:8b:3b:8d:16:97:fc:ee:
66:6b:27:c6:33:63:6a:c8:8b:e8:93:e3:43:97:bc:66:40:d4:
50:42:fb:e3:04:66:4b:c5:e6:06:28:41:07:08:f9:9f:b3:58:
e8:74:5f:1b:66:4a:59:ab:79:02:2f:be:6d:34:5e:b5:bd:b2:
c6:9e:8b:38:60:3e:65:d9:47:4d:2f:5c:99:dc:2e:92:19:0e:
71:ab:e6:50:fc:93:bd:ff:34:c9:e3:64:ee:27:7d:bb:11:ff:
48:ad:b2:fe:cc:2e:32:97:71:29:fd:4d:88:fe:d6:8a:1c:62:
b4:1d:eb:77:8d:2f:d8:03:ed:af:49:6b:25:d9:df:6e:5c:bd:
0d:89:90:02:21:67:f1:b1:9b:e6:95:e7:38:04:90:16:d5:d1:
66:92:76:aa:a9:1f:d9:99:e1:75:6a:69:7f:c4:43:5d:28:0e:
76:0a:cf:61:44:29:40:71:cb:81:99:c8:cb:46:13:88:19:a2:
dc:7a:13:bd:b8:80:8f:17:43:b4:43:8a:00:b3:8f:b2:b9:42:
a3:f7:e9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:28:44 2025 by rpki-client