Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa
File: e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa (raw, json)
Hash identifier: IZoVl38VOGERE4Qy5iB1Vkrdhlm2g9xs9GGP/R7MEpQ=
Subject key identifier: 58:FF:03:2F:A3:38:44:5C:06:6A:F0:78:6A:80:B5:DB:5D:62:AC:15
Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial: 010D0C9F43285848F65BD79C4DBD85C7AF921D40
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 13984
IP address blocks: 209.151.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d7:9c:4d:bd:85:c7:af:92:1d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=682a54fe-6ec4-4454-a5db-58c89968f262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:27:78:18:4d:0a:c7:8b:dd:66:87:8e:40:
b3:c7:9e:38:10:0e:0d:de:5b:6e:26:3f:2e:5a:b1:
71:23:33:b0:45:98:98:e2:51:d3:21:90:7c:77:b9:
d4:01:d9:08:bd:93:6c:56:a7:32:5d:a5:f7:b8:d9:
d3:ab:c6:8c:ec:5d:75:89:e1:8e:38:b5:d4:09:c8:
80:4f:28:b1:e5:9a:41:fe:6a:cc:13:1d:37:01:da:
d5:db:c8:97:41:2f:b1:2a:48:80:6b:47:b8:a9:a3:
c9:2c:a0:73:80:25:b7:eb:ee:a0:f4:7c:8f:86:6e:
ce:d7:1f:3c:c7:80:57:f5:e6:11:a9:09:65:32:e0:
01:eb:d8:93:e7:67:bd:2a:be:28:90:58:b8:27:81:
65:ce:68:e3:ba:66:19:81:77:1a:e0:a4:e5:c4:41:
05:48:9f:0a:cf:85:08:f7:d7:b6:4f:f8:fe:ae:1b:
21:8c:36:b3:2b:12:31:0b:00:38:cc:03:6f:96:40:
70:25:33:14:b2:36:2c:17:ac:e0:8f:4a:c1:26:a1:
47:af:58:a0:dd:20:48:aa:be:28:22:8b:82:c7:b2:
40:df:f0:04:ab:d0:14:25:63:59:04:ed:2b:f3:14:
f8:b7:b3:4d:73:37:c0:0d:01:00:24:43:72:06:c1:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FF:03:2F:A3:38:44:5C:06:6A:F0:78:6A:80:B5:DB:5D:62:AC:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/e47f2fe4-1e5f-3090-b945-e3342aa127a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
X509v3 Authority Key Identifier:
keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:a7:54:06:5c:7b:ab:cf:70:66:f2:6e:66:c0:85:14:1a:17:
fc:ea:f0:33:9c:e8:72:84:01:85:79:d3:95:6a:df:ae:95:cd:
26:7e:62:cd:6c:04:aa:37:8a:1a:20:f7:14:c4:c5:a5:cc:2c:
dc:0c:f6:37:1e:18:3b:63:a4:d1:1c:b2:60:99:d2:f0:89:aa:
0a:ea:e0:8d:04:2a:4f:2a:e8:38:b3:3a:9a:32:ac:4b:9d:3f:
63:92:af:24:92:17:16:1a:9e:7e:c9:5e:fc:55:77:96:52:58:
63:9f:1c:8a:80:2d:30:51:0e:c6:f9:68:62:f7:62:84:f7:e5:
33:ac:d7:0c:da:03:dc:9b:d9:83:c5:19:b7:ff:b1:24:fb:36:
e8:ed:92:d9:f6:4b:f1:f5:9d:c6:d3:d3:ba:6a:21:d5:b8:64:
a9:27:6a:23:cc:f9:15:f4:42:44:e6:09:29:68:eb:e4:63:4b:
41:74:2e:d3:72:47:48:c5:b7:0d:93:d1:c5:01:5d:b7:bd:32:
4c:0c:ae:dd:0a:04:51:42:e1:16:db:96:0c:c7:5b:42:a9:07:
82:ee:b9:1e:87:bd:8a:2d:da:52:a7:0c:a0:06:47:06:fd:e4:
65:55:87:4c:37:45:07:90:39:31:42:fe:51:a0:dc:24:be:1c:
99:6f:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:43 2025 by rpki-client