Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
File: cfbac226-9694-3b77-98b0-76526b389042.roa (raw, json)
Hash identifier: 33xDiUXmNXjl42g4fBZr2TdUl5F+RBt7Yfy/UwI9CgQ=
Subject key identifier: 90:ED:A7:C4:BE:F5:EC:2D:C0:B2:AF:24:C7:C1:9C:19:DD:DD:EC:86
Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial: 010D0C9F432858488AE0A0D853C88B140242B740
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 25697
IP address blocks: 209.151.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a0:d8:53:c8:8b:14:02:42:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=e114c22c-fdaf-4f8a-85f2-92988ed8e880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:32:60:98:ed:0e:08:e1:5b:7f:c8:a6:71:
b1:b7:03:88:4a:16:dd:51:34:e4:3e:d1:f8:4f:62:
cd:32:3c:1a:28:00:f3:2d:fa:53:ec:9f:44:fa:7a:
63:5a:12:c1:d1:00:33:73:2b:be:1b:02:61:8e:7d:
ec:0e:41:65:0e:8b:57:d6:d2:11:ab:e0:cf:ee:63:
59:7c:59:30:b4:44:fe:fb:92:eb:53:89:92:e1:47:
24:d6:79:d6:11:12:61:c2:8e:de:94:e8:30:27:86:
aa:c8:0a:ac:db:e0:25:3d:15:ad:0a:cb:33:6c:7f:
11:07:d9:7a:6b:32:c4:57:16:11:ee:49:e3:72:c8:
69:75:c1:70:6a:21:22:fe:1f:bf:a0:3f:0e:17:f0:
40:46:70:1c:00:cb:b0:41:19:52:07:53:53:20:95:
ed:c3:c0:7b:7d:a9:02:95:b5:9b:a1:8f:4c:27:68:
3e:23:7c:10:70:ff:b7:3c:5f:c0:63:9e:c5:87:e8:
8d:18:1b:4c:bb:29:a2:24:cb:5a:b2:91:03:80:3f:
db:73:d1:4c:c5:f6:e3:c7:7c:55:cc:2e:ba:eb:55:
d0:cd:fd:d4:ff:ce:fa:73:56:6f:0d:9d:6d:4c:a2:
5b:56:a9:32:70:31:5b:e8:87:17:33:d4:cc:37:1b:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:ED:A7:C4:BE:F5:EC:2D:C0:B2:AF:24:C7:C1:9C:19:DD:DD:EC:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/cfbac226-9694-3b77-98b0-76526b389042.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
X509v3 Authority Key Identifier:
keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:57:f7:31:df:81:dc:6c:b8:42:a6:2f:13:39:93:a6:a6:45:
bd:c7:e2:a6:ed:fd:cb:90:33:78:7c:e6:2b:96:76:fb:da:41:
6d:7f:4b:eb:c3:38:ac:c2:ec:82:c1:18:2d:68:50:2e:67:74:
20:52:59:91:f6:c3:9d:29:9b:c9:ac:f8:0f:9c:74:2d:59:47:
04:5e:71:db:32:fe:8d:e3:21:15:01:ce:f1:c8:73:58:78:81:
a1:da:27:f2:be:9d:1a:fb:e7:b7:41:8c:ee:66:a7:ec:69:f2:
85:b0:a7:72:d5:4f:eb:2a:bf:6c:5b:8c:d6:bc:66:d8:17:1b:
0b:ae:5f:5a:c6:5d:38:e4:0b:4f:9b:0f:7c:a0:e8:80:36:6b:
48:bb:65:8d:5f:a5:e8:0d:76:a2:29:68:aa:60:e7:3e:b9:09:
c3:85:98:b7:35:e0:af:1f:78:f2:99:8f:72:7e:9c:13:b8:fe:
67:50:b8:a4:c1:a7:0d:a4:e6:bf:a6:c2:4d:12:ea:31:fe:3c:
84:94:8d:fd:24:85:0e:b2:cc:e9:0f:a0:af:4a:16:55:48:0f:
0b:53:9c:0c:9e:d6:30:ca:7b:1b:38:a4:61:53:27:8b:0c:8b:
1d:3b:f2:5e:e3:be:0b:3c:e0:c6:fa:9e:ec:fb:01:52:49:93:
fd:41:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:26:29 2025 by rpki-client