Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa
File: 7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa (raw, json)
Hash identifier: 7cbHo3HGR8UPULHVLQh6i4X9Bmy2gH7U73XTC/tpwqM=
Subject key identifier: B6:5B:19:E4:23:F6:51:47:50:EF:47:66:01:26:FB:4B:E4:60:73:72
Certificate issuer: /CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
Certificate serial: 010D0C9F4328584925B3AD0ACCA6EBED49CF3380
Authority key identifier: 0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 396982
IP address blocks: 209.240.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:ad:0a:cc:a6:eb:ed:49:cf:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=d9b4097c-1dbb-473d-8582-5409eb04e1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:04:84:4e:be:94:20:b7:15:bc:17:f2:d6:
6d:81:b4:c4:ef:3d:b5:d6:cb:94:51:2d:f9:67:e4:
c2:e8:58:f6:d3:50:ce:c7:30:45:6d:a1:9b:fd:b1:
1e:25:d8:9b:e8:e1:9f:35:12:89:21:e6:09:4c:e3:
37:a0:ea:a1:68:8f:b8:b8:0e:15:33:29:a8:55:51:
2f:b1:27:d1:66:d9:1e:ab:27:2e:ea:e4:15:23:3f:
be:cf:7b:d0:c9:63:9f:63:d5:15:6b:66:07:2f:07:
c0:19:9f:0e:89:e9:16:73:40:62:77:38:88:9b:bb:
57:c8:70:fc:0f:67:45:a3:c3:18:2b:06:5b:04:f3:
13:78:24:0d:23:d3:d8:0c:e6:55:f5:8d:d9:c9:80:
3a:f8:77:d4:f7:3f:46:f8:da:4c:81:7d:fb:14:ed:
01:7f:74:69:de:43:c8:a6:f1:73:36:60:6a:78:7c:
88:9c:12:b7:14:3d:77:bb:6d:f7:cf:fc:b1:e1:5a:
b0:19:d7:fc:82:4a:58:28:0c:56:15:ff:74:d9:c7:
ff:c8:67:6b:d4:85:b0:d9:d9:4e:50:81:de:76:4d:
b5:c1:ff:af:78:9d:af:3f:4e:04:fa:15:5c:b9:d1:
01:42:3b:25:00:a5:ba:39:5b:63:9c:d9:71:cc:92:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5B:19:E4:23:F6:51:47:50:EF:47:66:01:26:FB:4B:E4:60:73:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl
X509v3 Authority Key Identifier:
keyid:0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
sbgp-ipAddrBlock: critical
IPv4:
209.240.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:e8:96:19:06:64:e5:c1:1e:7e:ad:b6:d0:c3:09:1d:2b:ba:
c4:6e:02:5b:0a:d1:4a:a1:94:1e:71:5c:2a:1c:1a:fd:77:fb:
97:2d:07:39:89:b0:9a:6b:4a:e9:4d:11:ab:1e:86:29:a5:15:
06:ea:8b:2f:80:82:98:e3:27:77:f5:ac:12:fb:16:e5:47:b8:
24:eb:a1:fb:96:8c:83:3f:a0:a4:45:eb:27:1d:7b:36:ba:be:
64:97:e7:48:25:ad:f8:0d:21:b9:a3:19:ff:81:6c:91:60:a5:
6e:5a:86:4c:84:2c:d1:be:34:84:03:34:14:03:25:32:f5:95:
af:0f:f5:c1:0c:15:32:ef:78:c6:c3:44:a0:34:ce:4e:50:05:
2b:9b:3a:4e:d1:d1:4b:94:19:be:8b:bb:e5:fa:a6:b3:00:78:
00:ba:15:af:17:a4:6a:f9:e7:af:7f:be:dc:d9:dc:df:db:a5:
d1:aa:9f:db:39:22:fd:e6:c9:38:3d:1f:58:88:e4:0b:85:03:
7e:27:d9:e4:16:0c:06:df:f8:8b:7a:fb:a4:e2:9d:6b:2c:9b:
26:80:ae:e2:15:d5:8b:8f:6e:71:ab:e1:b3:f2:44:a4:f2:a3:
bf:46:40:02:3f:65:3b:c2:94:f7:91:75:2f:01:8d:5d:2b:a5:
c2:05:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:34:49 2025 by rpki-client