Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52ea8b98-74f4-3122-acd5-365ad4949a5e.roa
File: 52ea8b98-74f4-3122-acd5-365ad4949a5e.roa (raw, json)
Hash identifier: fvzUOOeNGGjJKgvVzFOBPxQbdOTlvRaHDOBbsqNBIT4=
Subject key identifier: 4E:CC:DD:58:A4:6B:D5:A1:F5:64:1C:40:92:1E:B0:C5:3B:EA:F9:7B
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B35B6260648FEE75A043AEA0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52ea8b98-74f4-3122-acd5-365ad4949a5e.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 7861
IP address blocks: 209.115.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:62:60:64:8f:ee:75:a0:43:ae:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=29e9103d-2c56-4f18-b2d2-febe55ef0c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:23:b6:c8:26:f7:2f:5f:32:64:d9:47:ee:
0f:49:3c:78:2e:2a:d2:98:ea:19:59:a9:6a:23:d3:
81:9c:3a:2c:2c:be:27:33:51:9b:da:3c:6b:cf:d0:
24:89:43:3e:1c:5b:f0:42:bf:af:d0:6e:4b:50:99:
20:98:10:10:63:cc:c4:a4:9c:a1:93:a7:8b:5e:e5:
4a:22:08:c3:21:66:7f:9b:eb:92:ce:d8:ea:2e:6c:
9b:27:0a:5d:b4:bc:10:8c:1d:5f:41:d8:b0:bc:05:
ac:bd:d6:06:9e:67:1c:ff:44:f7:f9:09:ab:a5:4d:
e1:e9:6c:53:13:ef:f7:1b:44:31:bc:e3:cd:0d:6b:
40:e7:b7:d2:fb:24:ca:71:f2:0b:34:42:d0:82:94:
4b:24:99:70:fb:65:13:9b:b5:ce:d8:59:cd:d4:7b:
00:2b:52:df:16:23:f9:73:ce:57:2a:6e:82:36:64:
ba:bd:e9:3e:f5:d7:c9:72:94:ba:05:b4:e8:fc:1b:
3c:e7:cf:ad:46:5b:a8:b7:2d:d6:af:9c:c7:28:0d:
1a:d5:87:9b:1a:7e:72:7b:c1:4d:cb:e3:01:fc:b5:
b2:4f:8d:8c:14:5c:03:ed:15:81:33:e4:eb:a6:42:
e3:97:4a:16:95:5a:79:92:fe:3e:cc:f7:50:ed:e6:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CC:DD:58:A4:6B:D5:A1:F5:64:1C:40:92:1E:B0:C5:3B:EA:F9:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52ea8b98-74f4-3122-acd5-365ad4949a5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.115.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:b5:95:e1:5b:22:4b:6f:3a:60:61:bf:93:1f:1e:82:be:f5:
bc:aa:9e:54:d5:15:17:c1:78:e2:62:45:34:74:ae:1d:7d:92:
c8:28:dd:3a:5d:84:3f:a3:b0:07:1f:3d:a5:50:80:29:2b:88:
bf:5c:26:62:10:c7:a4:4f:f4:d8:ed:92:99:b0:f0:18:0a:c1:
3e:f9:30:6d:21:07:b1:85:9e:ab:b2:c5:de:1e:c6:dd:8c:9c:
63:1d:ae:c2:86:88:09:1a:9d:1b:a2:5c:81:a6:92:0e:f2:1f:
d2:1b:14:48:8e:f8:23:0d:05:db:4a:94:b7:72:85:5f:9d:c4:
9a:9b:db:29:8c:83:51:e5:34:e4:f4:92:02:01:23:c9:c5:37:
ba:1a:88:74:2c:ab:dd:84:a7:1b:cc:96:9c:67:33:9b:10:d2:
47:d9:4c:d7:27:6d:7a:fd:48:79:b4:c3:73:f8:1b:be:e3:e3:
65:a0:c8:a1:9d:bf:f5:12:74:e4:da:7c:b4:8f:ff:65:d3:cd:
e0:9f:26:0e:3a:87:48:f6:8d:dc:75:58:87:ed:17:75:f0:f0:
10:4e:80:ce:a3:c0:d6:0c:f0:7f:dc:9d:0e:da:f1:f4:e2:d3:
eb:db:7b:c5:35:ad:ab:a1:ad:2d:9e:d7:e2:15:af:c0:82:b7:
b7:fe:06:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:34 2025 by rpki-client