Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1b96501-315e-366d-a2fc-5d5497e80367.roa
File: f1b96501-315e-366d-a2fc-5d5497e80367.roa (raw, json)
Hash identifier: hsHB+KhA9tnc0TOVDvEC6TCvtYpMnTpRUfHvqqsBDPs=
Subject key identifier: D9:D2:BD:C3:C3:AE:C2:19:05:6F:4A:6B:08:44:7C:32:75:C1:F6:F7
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB7C714F7DE7FBE2C99900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1b96501-315e-366d-a2fc-5d5497e80367.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 209.20.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:7c:71:4f:7d:e7:fb:e2:c9:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=09cda287-a559-4f37-ae3d-20c8b6cc396d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ac:e7:c2:5d:be:cc:f3:09:2d:43:0b:6f:83:
5e:58:ba:54:c4:1f:e7:b7:bb:61:71:61:07:10:e6:
f3:09:81:93:6b:d7:f0:29:6b:6a:6f:a2:f2:6c:9b:
3f:16:d1:d0:01:25:4b:c6:2f:12:b0:a3:2e:69:b0:
49:5e:80:c9:ef:bc:b6:4d:e7:21:86:e1:34:6d:0e:
26:94:e6:f2:60:bc:5a:6a:c4:26:09:72:ce:cc:2d:
31:05:ad:40:59:99:bf:db:be:6b:30:68:a4:d3:10:
da:5e:d3:88:c6:08:ee:1a:a4:e8:df:20:61:47:04:
34:67:bf:f2:7c:02:f6:a8:e7:9c:ec:e7:a6:43:93:
9d:1c:2a:aa:42:19:81:db:c6:84:66:4f:0f:ee:78:
fd:e2:0d:a7:d8:d3:f1:7f:7c:c5:d8:e4:c9:91:5f:
cc:66:0e:d5:bb:12:b1:66:bc:df:32:d7:4a:ad:5c:
1e:24:ce:a6:bc:65:38:cd:a5:f2:07:20:ca:37:26:
25:eb:52:c4:9f:e3:75:e9:08:ac:9a:08:3a:df:b8:
97:a0:98:21:35:a9:43:b8:13:e0:00:cb:1e:6c:05:
3a:d4:ef:e4:0b:e6:d1:b3:85:4b:93:3b:9b:4e:f6:
d4:ed:e1:66:97:8e:25:72:3b:dc:fa:04:76:93:ab:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:BD:C3:C3:AE:C2:19:05:6F:4A:6B:08:44:7C:32:75:C1:F6:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1b96501-315e-366d-a2fc-5d5497e80367.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.20.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:fa:e6:36:24:31:66:3c:b8:56:fd:13:3d:6b:1e:a9:7d:90:
e0:1c:b1:6a:b1:f3:c2:f0:18:fb:c3:c7:37:7e:c3:b6:2f:38:
43:32:3b:23:ee:38:dd:e9:8b:fd:a3:07:20:d8:24:9b:2b:08:
de:4f:db:56:98:e7:59:64:30:bf:43:86:2d:5f:6c:be:c3:11:
e1:de:65:50:6d:bf:95:7e:a4:7c:8e:fd:48:f8:ec:31:99:05:
83:f0:0e:eb:c3:a9:ef:0f:6f:54:77:9f:42:d9:e6:bb:9d:74:
1e:b9:d8:2f:7c:ed:60:57:f4:ab:05:8a:2a:db:53:0e:ea:4c:
05:79:3e:dc:66:d0:f9:47:23:22:23:1e:08:21:59:a5:98:a3:
d1:2f:92:78:16:2e:06:ac:c6:08:d4:70:3d:1b:6b:4e:71:d0:
c8:d5:c4:64:24:96:03:a7:7a:72:34:54:58:d7:c9:1a:85:d5:
6f:a6:2d:a8:3b:b9:14:20:a4:90:24:3e:b4:c3:01:81:f6:2e:
6d:9a:78:5c:0a:ce:19:38:9b:cf:9e:8f:75:59:de:7b:6e:ab:
1f:5e:42:08:77:42:55:5d:41:13:1f:5e:3c:b2:a3:f6:85:50:
f0:2a:32:fe:a8:b3:6a:a2:f7:a7:2f:22:9c:d2:12:3e:f5:fe:
16:17:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:22 2025 by rpki-client