Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa
File: 40185669-7cfc-3465-8a11-d5521152b30e.roa (raw, json)
Hash identifier: 49MKRAVGklfjqHFwKQUGDqGrjTbXrCZhAL4c5NpuTso=
Subject key identifier: B8:9B:E5:D4:FF:44:3F:69:85:92:4A:7F:30:F3:BA:C7:F6:B1:F8:D8
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848A996258D61C736FE87F45800
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 25668
IP address blocks: 209.53.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:25:8d:61:c7:36:fe:87:f4:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=90333a01-44a0-441e-9bc8-9f09b7ab1ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:0b:cb:ae:66:0a:d7:ad:42:19:77:f6:2a:
e1:0e:26:5d:86:ef:ec:23:2a:ca:ef:81:79:d8:7e:
3e:b3:41:18:37:8f:b4:56:12:ee:8d:46:ca:f2:d4:
bd:17:4e:98:d4:69:3e:1a:12:9d:2b:dd:d1:c1:c5:
22:4a:53:ab:80:fa:64:c6:8e:83:36:e9:40:ba:98:
25:c4:68:3a:92:37:b7:82:d4:4b:4a:e5:b7:88:55:
7b:90:9f:33:15:3c:67:27:05:ab:6e:64:e7:17:6e:
ad:03:35:3c:32:52:ee:5a:ac:5c:b9:fc:e4:f5:e7:
c7:25:9d:c3:9c:5d:b8:2a:33:5b:40:ab:c8:c6:c3:
be:84:f2:1a:64:5c:1e:53:f2:c6:79:76:f2:08:bc:
a9:40:6b:ae:14:47:0b:3c:2c:67:95:f8:4d:30:9b:
c0:de:94:ea:cd:89:4f:2f:a0:95:5d:24:94:99:92:
82:76:61:8e:e5:ef:64:f4:4f:03:2a:f0:ce:8f:5b:
ae:33:c8:b2:74:0f:47:57:e3:b9:d3:f8:a6:93:48:
ca:96:af:84:ff:30:2a:87:58:05:57:e6:e4:47:b0:
36:2b:89:cc:4c:cc:fa:27:48:bd:81:d7:4e:f2:9f:
e1:4d:fb:47:0b:52:df:f1:02:bf:44:5c:4c:ba:90:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:E5:D4:FF:44:3F:69:85:92:4A:7F:30:F3:BA:C7:F6:B1:F8:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40185669-7cfc-3465-8a11-d5521152b30e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.53.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b4:fb:e2:8f:41:72:2d:46:6e:ef:b9:0d:44:cd:bc:8e:a8:
d5:57:7f:c2:d2:73:96:68:e3:58:36:c6:f7:6e:6a:63:f3:a8:
2f:8a:c8:ef:72:a9:59:c2:46:20:a7:4e:72:cb:3c:a0:ff:76:
f5:32:14:8c:ef:ae:29:b0:c7:04:b2:71:55:bb:27:60:e7:2e:
d0:75:d9:b2:ee:b4:bb:1c:30:a5:dd:d4:cc:79:85:91:c4:13:
26:8d:fa:cc:69:3a:05:39:40:d7:b6:c1:af:a2:8b:c3:e2:33:
b6:7d:0d:e7:90:fe:33:75:f1:98:9e:11:22:fb:e6:81:50:eb:
bd:92:e5:b8:e1:e0:f6:c7:cb:ef:1e:b6:a8:2c:13:f2:ea:e8:
c0:22:13:50:02:89:77:8f:e8:93:8b:0b:11:88:e7:d7:23:91:
43:03:60:05:d5:5d:d7:60:ef:65:c1:af:f9:f3:06:d3:bf:36:
20:6c:4e:3d:85:8b:38:bd:8d:89:1a:4e:eb:c4:ec:cd:7b:76:
e9:d0:5f:50:fe:a8:9a:62:9d:8d:4d:7b:87:d0:30:a7:17:a9:
24:9b:49:94:38:ef:69:87:8b:a0:24:58:9f:92:b2:0e:75:4b:
e8:12:3d:59:07:71:c6:16:e1:6d:65:4c:d6:21:cb:07:3b:69:
58:15:40:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:22 2025 by rpki-client