Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa
File: a976272e-66d4-3404-810a-1db9636b39a3.roa (raw, json)
Hash identifier: IXf2j1F+jVyJ4+FXehfWPz5940nMLM2q/PzPzbmVwDo=
Subject key identifier: 61:BB:29:74:4A:25:C3:6C:12:3B:F9:08:C9:D3:1E:92:1F:05:D9:A5
Certificate issuer: /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial: 010D0C9F43285848F4F697059351BEB3CCB6FD80
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 399628
IP address blocks: 209.237.154.0/24 maxlen: 24
2620:96:a000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:97:05:93:51:be:b3:cc:b6:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=244808a6-4c97-4b02-8a2b-9b9b42e4dddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:90:6f:dd:00:84:a8:e2:07:d6:32:90:fe:
71:5e:bf:0b:16:98:41:92:09:34:21:67:40:45:1c:
f5:15:7c:16:99:dc:52:24:40:c5:87:ff:3a:7d:03:
0e:b1:68:a0:3e:5c:b7:52:5d:35:5f:56:95:1c:d9:
64:e8:6a:26:c9:14:5d:cd:a8:7d:bc:ff:94:f1:39:
e1:d3:b4:2a:98:77:65:25:ae:c4:cd:bc:73:3c:dc:
6f:95:ff:6a:0d:8b:48:49:9e:b3:ea:38:93:a6:fd:
f0:4e:38:91:87:39:76:6d:bb:c8:ab:5a:6e:61:19:
e9:6c:10:23:9c:ad:a5:0d:a4:2d:13:88:e4:83:49:
d2:75:8a:71:1a:25:41:38:ed:cc:63:c6:16:58:cc:
95:23:3b:ee:ed:ec:13:c2:d3:81:34:32:5d:e6:2d:
15:54:d5:60:d5:e2:9a:36:74:e5:41:a9:fa:b8:63:
ee:8c:3d:bb:de:8f:d7:a4:38:6a:db:2d:ff:67:f2:
d6:86:32:1f:c7:de:66:49:9d:eb:f6:20:f1:16:fc:
0e:db:e8:8d:a4:fa:f3:47:96:33:2d:1c:58:78:6c:
6e:f3:10:c4:9d:d9:07:37:42:90:69:af:82:23:16:
73:22:96:be:3f:6c:64:a5:a6:5c:df:7c:12:84:00:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:29:74:4A:25:C3:6C:12:3B:F9:08:C9:D3:1E:92:1F:05:D9:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl
X509v3 Authority Key Identifier:
keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.154.0/24
IPv6:
2620:96:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:fa:ed:77:10:2a:f7:9c:6b:2a:9a:b8:71:e7:b5:58:82:58:
d0:0e:13:8d:e5:c7:4f:01:8b:e1:ca:54:12:cf:f1:76:d5:0c:
d8:b1:57:b6:2e:04:be:f7:0d:95:41:dd:98:6d:eb:43:a7:68:
72:4f:be:d3:34:3e:ba:64:0c:ed:9b:11:dc:32:c0:8f:5e:bc:
a7:57:d4:bc:cf:40:00:c2:a5:32:dc:a5:fc:1c:aa:26:1b:2d:
68:57:d6:54:fc:79:99:60:f6:8f:a3:5e:13:99:b4:41:a7:b9:
3e:f7:2d:d8:12:31:2c:c8:28:3f:81:24:82:6d:a5:68:12:a3:
5b:0f:6c:fa:2c:26:76:8c:83:29:1b:fa:ed:72:9e:da:d3:a4:
2e:79:8c:30:e9:e7:6e:ae:32:33:b8:19:4f:4f:a3:75:2e:b2:
d4:1e:66:a9:3e:24:74:b9:57:c9:b5:99:75:ae:8d:5a:16:4a:
d5:1d:76:b1:47:f1:36:9f:b0:78:82:b3:71:03:47:41:05:77:
05:6f:3f:57:88:3b:48:40:2d:e7:a2:1c:82:63:c5:8c:65:01:
80:7f:1e:d0:8a:37:b7:c8:95:05:e3:3d:76:ea:77:06:8b:50:
8d:14:8f:cd:56:a5:55:63:20:ec:61:aa:22:ba:8b:4d:32:f9:
2a:00:1f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:24:58 2025 by rpki-client