Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa
File: b938ef69-2886-35a9-9252-032a68a12f49.roa (raw, json)
Hash identifier: V4P4iiixvBkyjWC81RG0xAJF0IOQa0Imvr7zP8TjFvs=
Subject key identifier: 5A:8E:CD:B6:D8:B6:AB:55:EB:2F:09:D1:0E:36:FF:1B:46:5C:79:EB
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584950F96680DD8C979F3735C1FA
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 11290
IP address blocks: 209.15.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:66:80:dd:8c:97:9f:37:35:c1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=d041b634-c7d1-4bc0-874d-38bc34b6b264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ba:74:74:72:8b:6c:40:3b:67:7b:d8:d4:ce:
ae:4e:10:2e:f2:4a:e2:78:5b:c2:de:95:fd:de:5b:
f3:a2:f5:f9:ad:87:40:24:0f:a8:8d:c0:90:cd:54:
e0:ba:34:a8:e9:a9:1f:84:8b:49:b0:b0:bd:2a:92:
4b:69:d0:89:7c:81:e2:83:65:38:4c:1f:99:2c:6b:
6e:dd:17:59:27:fc:64:c5:a0:27:22:40:47:47:99:
ab:83:ff:82:03:8e:40:90:82:5f:02:f7:e9:d8:ff:
7f:79:ba:af:29:4f:1f:dc:2e:ee:ca:02:c7:1c:77:
1a:2f:14:d7:4e:12:da:e9:7c:85:4c:1b:ad:ec:48:
6d:0d:63:e4:b8:4a:b2:62:d9:a3:0e:55:d3:62:9a:
e3:a5:7d:df:cc:f4:79:aa:93:eb:13:c5:c7:99:f0:
87:c5:b6:53:b6:c8:be:9e:0c:44:5f:f2:5c:75:20:
fe:d8:21:11:e9:d7:5f:fa:27:b3:61:d9:46:d1:90:
fd:27:85:7d:53:d6:67:fa:ba:f6:ab:97:07:fd:bc:
e3:a8:5b:bc:2c:e1:07:6a:1d:bc:ad:26:73:ff:ba:
14:c2:64:fe:55:08:d7:e3:98:df:61:aa:07:0c:2f:
c7:10:15:6d:d5:29:55:93:a9:cd:a5:62:cb:06:2b:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8E:CD:B6:D8:B6:AB:55:EB:2F:09:D1:0E:36:FF:1B:46:5C:79:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.15.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:18:90:b4:bc:b5:7b:60:bc:fd:a8:11:a2:a2:76:d9:fe:8f:
ec:5e:ca:89:91:2b:31:ac:db:55:a0:91:78:fa:c8:04:be:f1:
d2:e2:1d:23:fd:9c:88:a9:11:4a:75:4f:77:8d:55:c9:68:3b:
65:d9:4c:8d:fb:86:72:9a:4d:aa:08:d4:48:42:48:ac:9a:cd:
05:30:bb:b7:ed:47:92:b1:47:85:83:af:06:91:b2:80:0a:d0:
6d:16:e5:b2:ee:ac:ad:93:b8:58:b0:5d:8c:5f:62:39:9a:5f:
9a:36:e6:61:7d:f3:45:43:33:9b:2e:83:8d:3b:1f:29:3e:08:
f2:71:9d:fb:8b:b1:cc:20:37:95:f8:55:05:88:a2:93:03:fd:
5a:50:a5:8f:54:f9:82:43:a9:d4:01:50:c7:ff:f9:b5:9c:24:
a1:eb:6a:ea:0c:af:43:6c:cd:18:75:ca:7a:e6:4b:eb:83:fd:
3f:78:57:55:53:48:01:93:ba:97:9c:7d:af:71:d2:c3:a2:7f:
d7:e8:e7:56:23:2b:9b:1d:8b:69:c4:89:b8:85:12:e1:b1:45:
0d:eb:c7:6f:76:df:53:d5:ed:93:3f:9c:91:5c:b7:27:3f:d1:
ea:96:e4:33:21:55:34:f6:f6:cb:48:d9:ee:f9:81:67:df:69:
9d:1a:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:56 2025 by rpki-client