Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af7f3c45-d998-35b5-8659-4ad7ca60b550.roa
File: af7f3c45-d998-35b5-8659-4ad7ca60b550.roa (raw, json)
Hash identifier: /IfwR/9+SRQZdSkzOdSTJO2Jgk1jPqoYRYz3DHjyJio=
Subject key identifier: 7A:45:CB:B6:BF:D0:53:5B:7D:D5:E4:B9:0F:4E:C0:07:C6:42:8E:B4
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285849071BED64AA70C7C4E5FDBBC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af7f3c45-d998-35b5-8659-4ad7ca60b550.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 395279
IP address blocks: 209.249.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:ed:64:aa:70:c7:c4:e5:fd:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=15bb9979-cd4f-4ba0-8c19-3ca0f392bc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:0b:27:f0:56:6f:84:90:86:f6:eb:e8:80:
37:4f:6e:e8:6b:55:a1:09:3f:d7:e4:d4:44:ce:97:
ed:af:72:c6:48:ed:af:87:d2:4e:e5:43:3a:08:84:
15:26:d1:4c:98:ec:34:c6:4b:c1:9d:53:35:7e:52:
d5:8f:54:97:4f:5e:ac:42:b1:7b:e5:36:7d:14:d1:
97:6a:0b:8d:df:b6:8b:e5:20:cd:57:c5:90:ce:3d:
83:4c:4c:da:6f:cd:0d:3e:46:a7:7b:6d:c4:a0:38:
6b:ef:c9:93:d2:0e:5b:8b:a9:4b:1e:8e:5a:39:46:
7a:e3:be:39:cc:5e:26:49:4c:be:46:2a:90:f1:54:
09:c2:85:ae:2a:e6:cc:ed:92:92:56:d1:f2:e6:17:
14:db:86:32:bf:af:b7:e3:90:9e:a3:17:33:95:19:
2f:b0:e0:9f:09:74:5d:2c:d2:1c:b3:89:4f:b3:fe:
31:8f:0a:ad:6c:0c:fd:2e:0c:b2:56:31:bd:2e:3b:
d4:57:64:27:fa:63:57:f8:eb:d7:f8:2f:43:44:ad:
5d:60:35:19:c6:67:ec:c4:de:2c:8c:45:7f:f6:ed:
e7:52:2b:e7:df:6e:37:3c:25:f5:00:80:c5:93:16:
af:cd:b4:90:9e:03:f2:66:0f:5d:de:25:36:ce:b2:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:45:CB:B6:BF:D0:53:5B:7D:D5:E4:B9:0F:4E:C0:07:C6:42:8E:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af7f3c45-d998-35b5-8659-4ad7ca60b550.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.249.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:56:1c:4a:a7:f0:af:f4:f5:17:10:e4:59:21:5a:cd:8f:d7:
26:5e:af:b7:86:17:2d:e3:d5:5c:e3:16:a5:4a:fb:f2:47:fe:
91:50:e7:00:ad:b0:a0:92:d9:23:a6:5b:ee:ac:75:ea:c0:02:
f0:38:55:32:d2:78:39:7b:e0:30:a9:54:cd:d2:30:96:80:b6:
1a:ff:3c:91:28:a3:ca:6d:8c:0c:ab:e8:35:7d:b4:e8:15:b9:
d5:dc:8e:9b:68:27:b6:a1:1b:8b:76:d2:e4:c8:64:49:b8:eb:
72:05:4c:2f:b1:4e:79:51:17:4d:1e:1c:43:ed:d6:05:f6:ef:
21:0f:bf:3e:2d:4b:13:a5:c1:a8:49:71:1e:12:71:9d:2e:e2:
74:70:43:b9:b6:c7:fd:a7:6c:2d:58:7a:79:a2:6e:e1:33:e9:
92:9b:b7:78:4a:53:f4:1f:68:78:55:d6:b9:7e:9d:87:6a:2b:
05:11:b3:6d:a5:46:86:4c:f6:4a:6e:9e:44:cf:ba:98:76:8c:
2e:3b:fc:ae:1d:c8:12:ba:3e:e5:36:c6:c2:ed:ae:29:30:ba:
54:4c:43:1b:e6:eb:a3:47:bf:9d:6c:53:72:3f:b1:e0:1f:fc:
02:c0:f1:d5:2c:d7:1e:87:8b:f9:6c:49:6b:8c:f0:9c:3b:3f:
81:a2:c1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:33:57 2025 by rpki-client