Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa
File: c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa (raw, json)
Hash identifier: v/gzD2yV7AiBQp3IfgT+e6pCh5fPqAKnXhlQHCXLIZk=
Subject key identifier: 59:F0:2F:7A:A0:61:4D:02:72:C9:8A:F4:77:A6:F9:BC:D4:04:3C:C4
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848ADC60EEAECAF251505DEDA80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 21723
IP address blocks: 209.89.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:0e:ea:ec:af:25:15:05:de:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=84856e52-cedc-48c4-ad0a-8b56b40bf9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b4:2e:3f:22:a5:4d:fe:e5:e1:d5:d5:7e:39:
d3:47:7e:a6:99:c0:71:28:71:f0:13:0f:0d:02:71:
31:35:bd:bc:0a:49:4e:34:8a:88:a1:39:c1:13:8a:
42:1a:46:dd:db:e0:01:65:52:ea:94:e7:85:ac:7f:
a1:eb:2b:46:35:35:5b:05:af:26:e2:f5:11:ce:76:
94:bf:6f:54:93:e0:44:85:88:84:9f:bb:af:65:9b:
49:c4:b2:f4:50:f3:31:a2:a6:1b:18:69:5b:9f:a0:
0f:d1:e9:fd:a1:55:b3:99:d5:64:e3:b6:59:8e:dd:
e0:60:75:fb:a0:88:73:9c:b9:b4:81:39:86:fc:54:
fc:fb:8c:b9:bb:d8:af:62:8d:2f:fe:0f:c3:2f:5f:
f6:48:86:e7:07:6b:a0:63:04:12:12:a1:ae:c3:6b:
b1:5c:c3:95:44:35:a9:f3:f9:ac:94:a9:51:87:88:
5c:b9:b9:96:c5:fb:20:45:b7:88:dc:40:60:5c:81:
58:1e:a5:c0:e0:c9:15:79:63:7e:06:ed:a0:79:44:
78:0c:7d:f1:2a:0c:a9:6b:c1:13:8e:c8:e4:16:59:
67:9c:f7:46:6a:bf:b9:36:96:4e:3d:cb:8e:6c:6d:
f0:09:ee:25:1e:c5:0d:33:1c:27:bd:9a:d4:4f:72:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F0:2F:7A:A0:61:4D:02:72:C9:8A:F4:77:A6:F9:BC:D4:04:3C:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c2aa98ae-a982-3f42-843a-8c0cb2bc9aa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.89.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:88:42:e9:b5:41:7a:b8:b8:0d:40:a3:15:4a:9b:8c:9c:62:
1e:85:6b:b2:cf:eb:3a:87:1b:3d:84:7a:e9:a9:ae:fa:1d:27:
c9:94:13:33:fd:67:1d:41:b4:60:66:90:77:83:2d:ce:75:b4:
7d:b9:4f:84:c9:22:0a:72:22:1f:41:5a:17:72:3a:a1:3e:03:
a0:b0:2e:64:8d:cb:1e:74:1a:30:39:b3:e1:58:3a:b5:16:1b:
f4:d4:99:4b:70:dc:c2:6f:6b:36:67:f4:ef:88:c6:11:85:29:
4a:85:d3:7e:5b:e3:d0:a3:68:3d:ff:e3:c0:09:85:80:c0:9e:
d6:7a:00:8c:97:c2:29:99:a7:c7:bb:c0:b4:87:48:c6:c0:4c:
f0:6c:22:90:bc:34:13:74:56:df:17:42:48:a1:a6:09:32:5b:
a7:12:02:2a:16:90:cd:1c:37:57:fd:0b:bf:21:a1:27:0f:5a:
d5:33:af:12:22:e9:d8:17:82:d3:89:8b:29:19:74:f4:75:7d:
65:a9:91:4a:92:87:67:ec:75:f0:e4:e6:67:7f:01:72:34:fa:
f3:0d:16:46:e4:4e:6a:2d:fe:54:bf:02:83:60:f8:f3:71:d0:
da:61:1d:64:bf:5c:a6:ce:cf:50:5b:bd:32:6d:04:46:9f:c4:
59:ed:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:11:26 2025 by rpki-client