Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/e0d79fd4-9174-37dd-ae23-196db87f1499.roa
File: e0d79fd4-9174-37dd-ae23-196db87f1499.roa (raw, json)
Hash identifier: K5vysoCb+2oztG7Lu3NEm3ZAezsMTbxAoGce0gpxex8=
Subject key identifier: C6:4A:67:1C:1D:A7:97:86:2B:F8:85:84:97:7D:E9:2C:31:A2:BE:E1
Certificate issuer: /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial: 010D0C9F43285848E00657FAD44AE26C462510C0
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/e0d79fd4-9174-37dd-ae23-196db87f1499.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 397041
IP address blocks: 209.59.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:57:fa:d4:4a:e2:6c:46:25:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=21f9ea51-bd9f-4ee8-96d4-32c54267cd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:44:96:13:2d:4f:3e:e1:63:cf:9a:07:76:
0e:28:4d:37:dd:83:7e:c8:31:ed:ff:48:74:e6:16:
d8:1f:af:62:27:6b:73:1c:26:1e:f6:d2:9c:7e:d4:
91:19:9f:4d:c4:20:cd:fc:2d:2e:9e:83:4b:b7:87:
2a:7e:51:04:97:f7:7c:32:8d:55:a5:ba:d8:a3:9a:
47:72:7d:e7:87:a2:5c:fe:7d:ca:db:6b:dc:55:93:
51:dd:69:e8:ea:80:4b:01:e7:8e:74:2e:c3:64:41:
be:79:61:ad:0a:7e:33:66:46:a8:a7:64:19:b6:55:
87:a1:7b:d1:e0:c1:fe:7d:7a:8e:00:9c:b5:9c:86:
fc:3d:7b:c8:16:08:6d:4d:36:ca:84:ea:ce:2a:ea:
00:1a:16:47:a5:e6:4e:9c:d5:8a:7c:bd:a0:83:3f:
be:3e:fd:c5:43:b6:39:84:f6:9a:15:1c:78:e3:02:
e4:e4:74:39:62:6e:7d:95:38:10:52:de:78:fb:79:
9b:ed:78:c2:74:2a:81:0e:a4:59:4e:fb:5a:71:fb:
bb:89:9f:3a:f7:9a:66:de:ea:83:ca:6b:00:38:9e:
6d:e0:ab:70:38:4a:14:75:e1:de:b8:82:0d:ed:f6:
41:4b:b4:ca:a3:90:3f:44:f4:b3:2c:8e:fa:c1:0f:
6b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4A:67:1C:1D:A7:97:86:2B:F8:85:84:97:7D:E9:2C:31:A2:BE:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/e0d79fd4-9174-37dd-ae23-196db87f1499.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
X509v3 Authority Key Identifier:
keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
sbgp-ipAddrBlock: critical
IPv4:
209.59.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:26:1b:63:99:6c:eb:5b:bd:a9:93:c7:b2:be:84:1a:0a:2f:
74:f6:97:b5:12:bb:86:6b:19:9d:e6:5e:41:3f:aa:bd:4c:29:
8a:30:a9:04:1f:77:67:38:05:8f:d6:ff:d0:79:e1:50:bc:e7:
7a:9c:60:76:0d:e4:91:5e:c3:36:b8:a1:2a:92:12:23:56:94:
90:83:7b:ba:b6:5e:1b:eb:77:67:25:ca:d3:3e:ce:0a:dc:97:
01:7c:8b:30:a0:bd:53:86:d1:4b:1a:7e:98:b8:c2:d3:61:19:
f3:13:23:6f:9a:83:24:16:51:d7:a5:40:81:14:ad:03:db:e1:
bd:ad:00:3a:51:52:c8:e4:10:50:fd:17:eb:93:01:92:f5:c0:
f8:29:47:8f:21:a2:f1:e0:17:8d:49:e5:ac:64:e5:b1:c1:d9:
43:db:39:e6:45:e9:18:4f:df:ed:14:77:13:0b:6b:c0:fd:d3:
6e:bf:d6:25:79:81:97:dd:f6:95:c1:5b:e6:77:24:a8:65:88:
21:ee:83:ed:b4:b6:1b:6c:b8:76:c0:39:89:c3:db:62:b6:26:
35:66:25:e1:dc:22:73:ff:0c:cd:32:88:2f:3b:dc:93:7c:4f:
3b:51:8c:72:a9:f5:f4:f6:c5:a3:87:74:cb:6d:71:a5:2a:90:
c7:41:e0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:31 2025 by rpki-client