Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa
File: 1c405104-ce81-34dd-86ff-db540904d806.roa (raw, json)
Hash identifier: l95Jmu8nzgtvdeGRj4UUMdHWVGheKMvCoQSRkcf2rr8=
Subject key identifier: 64:99:99:6A:AC:C0:82:B4:BD:4A:88:3D:2B:A2:88:F0:52:DA:42:8E
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F43285848D0ABAB40D4389E02CFDFC100
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 10397
IP address blocks: 209.209.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:ab:40:d4:38:9e:02:cf:df:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=5d481463-d04e-46f5-be11-8ee97974b690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:a9:98:cc:5f:c9:cc:18:5c:62:2c:76:de:
72:93:3f:f5:db:0c:56:af:d3:c4:8d:9d:e8:9b:c9:
6a:39:9c:33:5f:dd:00:22:89:78:1a:77:a3:bb:49:
61:ed:31:1a:38:09:6e:cd:18:6b:74:5d:42:18:2f:
41:ef:46:d3:6c:85:37:de:f8:75:26:65:a9:fe:81:
32:bc:1c:88:88:f1:dd:53:28:13:a4:97:4c:2d:78:
fc:c9:89:fb:cb:e7:9d:3e:f3:6f:4d:6b:0b:12:d1:
75:2d:c2:b0:eb:62:c9:f5:68:9f:c5:5e:44:13:89:
db:1e:ab:56:31:11:d2:c5:19:af:57:29:32:9d:fc:
85:e1:55:49:23:fe:39:d3:4e:28:0b:9c:8a:e7:fc:
b4:e2:50:27:5b:7b:71:ed:30:37:7f:1f:42:33:79:
3e:e5:88:18:f1:e8:5f:6c:71:0e:1d:ac:26:a5:63:
c1:76:5a:f6:ab:1f:85:02:89:91:3a:16:c4:fe:17:
50:b9:dd:de:af:75:eb:43:f2:4c:43:1d:38:fc:5b:
b8:2f:c7:0a:f4:b6:f6:0a:de:eb:40:f1:35:48:aa:
93:4a:91:0d:6c:93:c8:d6:de:98:0c:36:64:e4:2f:
1e:52:c3:61:f0:62:8d:08:b9:bb:10:77:e0:58:f0:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:99:99:6A:AC:C0:82:B4:BD:4A:88:3D:2B:A2:88:F0:52:DA:42:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
209.209.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:b0:0a:41:40:5b:7c:fb:2b:6d:ac:1b:b3:70:d7:ad:a9:3a:
bb:0c:d9:89:eb:54:87:ff:88:f6:71:64:de:0b:06:6e:7e:64:
fd:80:46:33:d6:65:ae:63:55:63:9b:0a:33:e9:18:33:f8:a7:
a2:44:60:68:2b:47:7a:71:61:97:9b:02:86:ee:7b:a3:8c:2e:
6c:11:36:c5:ca:3c:c7:33:e7:73:42:d9:1c:4c:e2:50:5a:ea:
79:4a:d8:78:ad:be:01:9b:68:16:71:01:03:ae:e3:d1:c8:e7:
4a:2d:2b:d0:0c:25:aa:89:87:c8:57:55:54:26:f2:42:d9:39:
ab:f5:5b:90:f6:c9:ba:e4:ac:84:bd:d4:a1:03:bb:37:82:6f:
36:97:23:9f:4e:ac:c6:56:de:34:b3:37:bb:91:ea:74:28:8a:
29:eb:fb:69:4a:63:4a:09:49:c1:bf:bd:ce:f6:37:4b:20:45:
61:8f:af:18:c9:21:bc:50:34:6c:8e:49:70:1d:71:5e:0c:02:
05:df:91:63:49:d8:c5:33:ba:f7:05:a2:86:5b:ad:d7:15:b6:
06:bb:aa:51:d8:bd:cf:53:77:b4:66:61:f7:c1:2d:ef:df:e8:
ad:2a:c6:91:5c:e5:26:f6:a2:26:fb:f9:1b:42:a5:ba:8e:86:
08:3d:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:24:14 2025 by rpki-client