Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3231792f-1c19-3d67-8e39-a10cd5261653.roa
File: 3231792f-1c19-3d67-8e39-a10cd5261653.roa (raw, json)
Hash identifier: Yl+cYJh3XHSECpLUm8kxAljdeeqwu1T5h7jf6DkPm48=
Subject key identifier: 51:8F:19:E3:3D:E8:C5:E6:38:72:D1:86:6D:3B:12:AC:F7:59:4D:D9
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B35B6297B3AE6FD93EA3F140
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3231792f-1c19-3d67-8e39-a10cd5261653.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 7861
IP address blocks: 209.29.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:62:97:b3:ae:6f:d9:3e:a3:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=89f06d7a-14c7-4b5b-be00-bdcc8599ea8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:cc:70:40:8b:41:89:a0:16:7d:3f:4e:b5:
a8:2b:f6:96:08:c7:e1:b3:18:b4:f1:df:91:d5:05:
eb:bd:40:ff:8e:80:7b:c5:3b:f2:f3:59:cf:99:14:
4c:72:c6:52:50:e9:21:fb:2b:fd:c6:c9:d6:db:7d:
f7:40:2f:d3:d9:df:9a:ed:28:da:52:55:58:dc:7c:
20:4e:d6:9e:b9:e0:76:9c:c3:52:76:67:4f:b1:38:
f2:6f:0a:df:3d:4c:85:b3:ff:66:87:cf:24:c7:7e:
66:41:6b:5a:d4:49:c6:21:74:15:fa:13:96:bc:6f:
99:b1:1b:bb:72:2c:46:83:83:cc:fb:80:1a:a3:38:
44:36:f0:24:f4:0b:30:05:35:9e:ca:21:ec:bd:c3:
b2:8d:60:6d:83:80:db:e3:73:54:74:c0:41:ad:81:
19:99:90:41:23:ae:e2:28:89:49:ac:27:3c:8d:31:
da:6e:61:e3:9a:3a:e6:a1:07:12:d2:6d:97:2d:a6:
46:a4:bd:af:62:54:4d:95:c8:29:c8:ea:49:83:1f:
69:4b:3f:07:b1:af:d0:c5:4e:83:00:76:52:95:b2:
dd:bc:b9:2c:0e:70:81:2a:8b:75:82:67:bb:15:8d:
ee:47:94:6d:15:24:6c:f8:8a:01:10:09:6e:ad:a4:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8F:19:E3:3D:E8:C5:E6:38:72:D1:86:6D:3B:12:AC:F7:59:4D:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3231792f-1c19-3d67-8e39-a10cd5261653.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.29.222.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:55:19:4d:f3:78:55:20:d3:e4:1b:5b:0e:ab:23:b7:6f:3a:
4b:1c:b7:67:75:1c:79:7d:fe:6b:76:a9:de:d9:05:fa:10:0e:
05:65:6d:2e:3e:49:0b:ce:42:a3:18:e1:6b:d9:18:0c:ad:3f:
a2:8a:51:8c:d4:41:16:63:76:5c:38:9d:4d:19:01:46:6d:2a:
48:d0:76:c8:29:cb:2b:9c:a8:23:31:69:85:44:3c:49:ff:52:
77:a1:4a:fe:31:e9:1f:86:25:40:52:ff:69:dd:90:02:c1:eb:
40:4b:23:91:93:bc:7f:b0:7d:51:86:ec:47:cb:6c:b4:43:18:
37:a5:12:6c:0d:3f:27:8e:56:0a:6b:6f:49:59:77:dd:f5:5a:
29:66:71:c7:a2:2d:01:d8:d0:bc:82:c4:07:78:dd:88:f5:58:
3a:98:75:b1:4d:c6:60:12:37:83:ae:55:01:68:ee:7e:b4:52:
bd:93:eb:42:0a:c0:75:a1:d6:07:9c:16:81:08:12:57:67:46:
05:84:7f:e6:ea:3a:29:b2:ea:11:b8:87:da:65:1a:36:0b:9d:
85:6f:99:7f:61:82:21:2c:21:38:d0:62:6b:c7:eb:5e:27:5f:
c5:8d:1f:98:13:ba:6f:85:c2:48:f2:19:62:5a:0d:d7:65:dd:
3e:61:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:06 2025 by rpki-client