Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa
File: 2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa (raw, json)
Hash identifier: RTjrhg3/D3E9pniPxi66vmnFN03w3l9su0p66c3X0i8=
Subject key identifier: 4A:92:FC:73:5F:4C:33:3E:A8:45:7C:52:15:70:64:38:50:E1:C2:67
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584949FE933A92B9182E1E2D6960
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 398202
IP address blocks: 209.178.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:93:3a:92:b9:18:2e:1e:2d:69:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=4fbfa558-347b-46e1-af64-f98871f6c6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:1e:9f:1b:24:e4:e5:66:73:dc:60:6d:6a:
88:d1:14:2f:72:d7:51:7c:61:84:1b:98:2d:ed:b1:
ad:7a:3f:d2:bf:e0:f8:e8:5e:fa:51:6f:2f:13:1a:
b1:6e:35:f9:77:8c:bb:14:dd:00:e9:b4:e2:b3:15:
a6:a8:12:a0:cd:58:0b:1a:84:88:e7:7a:ce:1b:17:
32:3d:5f:1d:ab:b9:a4:5f:9b:44:58:07:07:c9:40:
1c:25:d5:d0:71:0a:7f:98:9d:1d:cb:a8:bb:c1:d6:
55:59:0c:ab:36:4b:21:ae:46:c9:53:45:ab:cd:9e:
c8:45:77:5a:c2:23:67:46:93:1a:b2:6a:96:83:fc:
3a:f7:db:aa:f3:95:1a:b5:35:1c:02:fd:0f:bb:4e:
35:68:ed:64:b1:0f:3d:17:8c:fb:e0:3f:be:a0:48:
e0:67:9f:da:52:c0:16:e6:41:08:06:f0:fb:61:05:
1e:b0:20:0a:14:7b:c3:c6:93:4b:7b:10:55:b4:42:
38:a8:99:6c:8d:1f:b4:aa:78:8b:87:a8:da:27:c7:
82:4d:ba:d8:c5:84:5d:00:de:96:f8:e9:b6:17:c4:
a3:79:85:ef:4f:48:45:91:b3:73:57:27:10:30:4e:
b9:8a:12:36:ca:6b:6b:7b:5d:7e:d4:9c:2a:31:02:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:92:FC:73:5F:4C:33:3E:A8:45:7C:52:15:70:64:38:50:E1:C2:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/2bedd9b6-f4f8-3a86-a7da-f5ffa61f5c05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:33:a9:a0:46:82:09:0b:50:a3:79:8c:4e:be:61:d2:bd:4f:
96:3f:58:6f:36:4c:b2:4f:01:6f:9e:4e:7f:81:36:b9:9c:17:
03:ea:bb:b1:31:8e:d6:1f:40:16:f5:40:d1:5d:6d:f4:f7:c8:
26:4f:8e:fd:33:0e:44:61:c8:61:1a:7e:ad:4b:2d:7c:19:38:
8a:56:b4:64:e7:54:d6:a5:58:89:47:44:24:99:bd:a3:da:b7:
45:13:10:4a:c6:96:e4:6e:68:a0:55:0a:8e:72:f1:58:5f:b4:
c7:cc:ba:d9:0e:6c:a3:86:b4:c6:81:40:18:fa:69:cf:2f:54:
41:25:40:b7:96:bf:a1:d5:68:dc:5c:3a:6c:67:a7:2f:14:dc:
06:9e:df:60:ed:62:d5:b6:18:12:10:9c:c7:53:56:46:a6:f1:
fb:00:41:02:e1:bd:b3:07:70:6f:d0:20:24:a4:3c:bb:f3:6f:
a3:a8:09:4b:ca:33:0d:4d:ca:83:24:c4:3c:2b:1c:a0:c7:7f:
5c:97:70:56:10:aa:64:51:bf:4d:47:b8:69:dc:2c:b3:ce:97:
fc:1c:9b:e6:e9:3f:0d:bf:43:0c:61:75:ad:49:73:6e:6b:9b:
85:86:b4:bf:c4:5a:2b:bb:0a:b9:1c:4f:09:cb:7b:51:5b:95:
78:43:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:01 2025 by rpki-client