Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
File: 9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa (raw, json)
Hash identifier: 2l5HRuopEhNMncRWoMjwbdM4Iv5qSXgnDFUANzVmwHs=
Subject key identifier: F3:6F:EF:30:F3:6F:92:D5:2F:5B:77:4C:89:83:70:6C:52:62:4D:7D
Certificate issuer: /CN=700690a7-1957-45e2-8744-ee9735b07319
Certificate serial: 010D0C9F432858492E13BE56D0C8A6AA29F8AAC0
Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 36289
IP address blocks: 209.209.24.0/24 maxlen: 24
2602:fcb8::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:be:56:d0:c8:a6:aa:29:f8:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=b059780b-057f-44e3-937c-55df37f337b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:f2:0d:a9:1b:7a:e1:60:63:09:04:31:fc:
58:cd:6f:66:63:7a:d3:cf:ef:1b:76:95:80:cd:63:
6a:13:0b:a4:3a:06:ba:30:83:10:8e:c6:04:89:41:
e7:e7:4e:74:f2:0e:0d:c5:86:66:96:bd:16:2d:5b:
e5:11:b8:f9:db:88:2c:08:72:cb:83:d5:4e:23:77:
55:69:bb:e6:d0:bb:d0:dd:9c:d7:f9:ae:79:bc:52:
5c:a5:ad:eb:f5:e3:b3:88:07:42:53:11:d7:5d:2d:
a8:e6:86:98:f0:01:d2:7f:e7:3b:4e:4c:89:fa:85:
c5:49:8e:a7:23:4e:bd:c7:4b:b2:56:6d:15:0a:ba:
1f:67:ab:ce:43:64:7a:b4:67:d6:44:b7:41:67:cf:
db:03:1c:b3:92:6c:04:19:94:37:d4:db:ab:a7:0b:
80:43:b5:8a:78:43:12:ae:f7:1d:68:c0:5d:80:1a:
98:3b:84:a9:73:68:9a:9a:7d:5f:dc:1a:95:0d:a0:
ac:09:84:cb:ed:68:d0:57:3c:26:b0:66:42:86:79:
50:fc:28:5b:ce:e9:ac:f3:4e:2c:6d:f0:d4:91:e6:
c6:0b:73:ac:c0:a3:58:95:83:c8:30:0a:68:73:5a:
b7:f1:ca:d5:08:b9:b1:81:8b:b4:d0:9e:38:ca:3a:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:EF:30:F3:6F:92:D5:2F:5B:77:4C:89:83:70:6C:52:62:4D:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl
X509v3 Authority Key Identifier:
keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
sbgp-ipAddrBlock: critical
IPv4:
209.209.24.0/24
IPv6:
2602:fcb8::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:00:d7:bb:44:2c:18:04:8e:45:78:48:f5:28:de:83:df:ac:
90:4f:58:19:4f:36:db:ea:d0:50:be:53:d4:29:fd:85:c3:97:
a1:37:b0:d5:74:21:24:60:9a:b1:bf:08:8a:fb:86:bd:27:3a:
4b:b0:3d:f4:1b:65:5b:23:68:85:09:82:90:e4:09:cd:ba:87:
32:bb:10:6e:88:2a:95:cf:75:25:3f:6f:28:46:04:76:32:8c:
e2:26:3b:38:69:b0:9f:76:68:a0:8d:eb:69:5c:fe:b8:f9:a2:
19:59:eb:97:f1:77:61:da:a8:44:18:95:a8:eb:a1:1f:2a:f3:
c2:61:59:7a:37:de:8f:a9:c9:d6:2c:f7:a6:a6:c7:58:bb:c2:
43:ef:4d:a1:84:32:ca:2a:3d:43:4f:3b:32:55:b5:24:7e:e6:
33:fb:9e:c5:ff:08:6d:eb:03:09:88:fa:1a:c6:1b:1a:ff:e4:
e3:1e:71:2e:fd:54:3c:e3:56:49:11:bb:15:e7:d0:8e:85:02:
7a:03:ce:35:8e:b9:27:ac:95:ac:b0:ff:6d:4b:cd:93:d4:1e:
6a:de:ce:7e:f4:23:24:be:f3:d6:a5:03:ec:77:e3:45:8e:1b:
8c:17:70:f4:cb:2a:4c:4d:75:8b:9f:7f:72:01:24:8b:d8:fa:
c2:b3:26:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:41 2025 by rpki-client