Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aedbc364-26a5-320a-9ba4-fccfe653ab0f.roa
File: aedbc364-26a5-320a-9ba4-fccfe653ab0f.roa (raw, json)
Hash identifier: aaGSJ7ArCVwwsp/FtbQXC/osFQMRlIwJgTl5iVnAdZ4=
Subject key identifier: 16:C4:D8:EA:08:D4:17:24:74:5C:18:BF:D9:8A:4D:BC:85:7B:E3:32
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B1F6290A567EBF9BE4F203E0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aedbc364-26a5-320a-9ba4-fccfe653ab0f.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7861
IP address blocks: 209.89.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:29:0a:56:7e:bf:9b:e4:f2:03:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=ff768eff-bb73-4b48-b31e-432377521e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:9d:c2:ab:0c:11:45:37:ef:8e:8b:24:1f:
d0:b1:90:78:e2:26:8a:05:7f:5e:13:4f:f3:17:13:
1d:59:72:2e:fe:05:5e:0b:32:8b:da:e0:c8:7a:37:
ed:44:c4:84:97:ca:c7:ed:8a:5b:be:95:92:f9:ad:
bd:ba:4c:57:1c:9b:51:63:24:d6:6b:94:74:44:01:
06:72:60:1e:fd:0a:cf:eb:74:80:28:be:3e:66:58:
de:b7:b1:f6:b2:bf:c8:62:de:01:1b:66:69:5d:78:
0c:c0:df:a8:97:36:c7:58:1b:4a:75:3f:fa:1f:8b:
c9:36:0f:42:20:0d:53:0c:c8:c5:13:11:a9:d9:14:
79:12:4f:12:7e:0a:bf:db:28:68:68:d0:2c:1f:68:
70:18:2b:68:59:e0:57:06:d0:b9:fc:83:31:5b:0e:
b1:34:d0:bc:fa:fb:15:65:cf:78:4d:96:25:93:32:
7f:2f:f7:53:1f:70:35:50:07:2a:1f:fe:d6:4a:80:
33:40:c0:80:93:2b:dd:d2:51:39:ce:7e:b5:8d:3e:
26:dd:36:fd:81:cf:55:18:e9:6a:22:8d:24:3b:82:
83:d6:d1:e9:5d:3d:b0:a5:94:2c:7f:96:c2:e3:a6:
9e:28:95:5c:a0:d7:bb:0d:40:ae:10:ab:7f:31:41:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C4:D8:EA:08:D4:17:24:74:5C:18:BF:D9:8A:4D:BC:85:7B:E3:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aedbc364-26a5-320a-9ba4-fccfe653ab0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.89.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:e5:3f:c1:10:ab:75:8e:44:2c:1b:d8:23:26:64:9b:1b:aa:
b4:ad:32:a0:f8:77:4b:38:c3:d2:66:88:18:3d:11:8b:b8:2f:
1f:34:d3:3a:bb:81:98:f7:4f:0f:1f:a8:c8:45:25:65:b3:3b:
e9:35:0c:a5:5f:4f:9a:a7:75:2f:9f:9b:97:4e:90:12:19:dc:
35:37:82:c8:e1:88:50:bc:cd:12:7e:ba:f6:72:20:9d:5f:bb:
4d:9c:72:1f:e8:96:f6:3f:0b:9b:97:ee:5a:1c:58:6b:8b:9a:
48:13:50:cd:e6:5c:6a:34:f4:07:a6:cc:dd:45:6c:54:4e:5b:
f5:8e:6b:5b:24:8a:24:7a:3d:5b:98:09:1a:3d:4a:4d:c9:74:
f2:7e:56:df:b8:1f:0a:9b:1d:7b:67:29:8a:9a:dd:4b:3f:18:
cb:91:ed:6e:3d:3e:ad:d8:b7:24:ab:81:6b:89:52:34:f7:f9:
f3:46:1c:4d:eb:5b:43:b3:94:54:5a:96:21:c6:dc:86:ec:ba:
8f:07:bd:3d:93:91:b8:31:f8:e0:99:82:8f:5d:10:93:a8:68:
df:e0:37:16:c6:e6:35:23:d5:cf:ba:b7:20:1c:d4:5b:68:ad:
72:06:4a:95:35:10:71:b1:59:eb:0f:04:6a:6e:a4:a4:ce:f1:
54:07:7b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:28 2025 by rpki-client