Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/6204d571-e803-3094-aba8-da4087c9cc40.roa
File: 6204d571-e803-3094-aba8-da4087c9cc40.roa (raw, json)
Hash identifier: hugXXrk9ZhFPBB+fc7TyyycmG1mJJ/xiE9LVbkU1Ngk=
Subject key identifier: 56:91:0F:EE:BE:B8:72:04:27:E6:2A:BE:B3:6B:F7:4B:3A:EB:64:32
Certificate issuer: /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial: 010D0C9F4328584902EC24E59FBD48FEAEC53280
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/6204d571-e803-3094-aba8-da4087c9cc40.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 10929
IP address blocks: 209.44.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:24:e5:9f:bd:48:fe:ae:c5:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=3bbe16fb-0e74-40f6-bc3d-e2bacf067329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3f:33:1a:85:a2:27:a1:ff:76:53:89:b6:c6:
6e:86:1a:c0:c7:46:3b:be:94:23:f4:56:ef:11:8d:
11:28:07:09:fd:b0:e9:e3:a1:2a:69:26:e0:f3:50:
64:3c:10:5b:df:6b:5b:63:66:68:eb:e4:69:02:72:
8c:28:7a:3f:07:b2:72:10:44:3c:6d:cb:67:92:a1:
b4:27:65:9d:23:75:22:33:59:1a:d4:eb:47:16:de:
c3:fb:39:4e:be:3b:da:f6:35:d7:47:ef:a8:44:5e:
77:f4:61:58:0a:82:ef:23:24:71:1c:cf:cd:b7:c7:
b1:c7:23:1f:f6:23:78:53:b9:b6:7e:6e:b7:80:bf:
84:9b:d9:cb:04:cb:bd:99:87:bb:5e:11:16:b7:05:
e8:5e:6c:d2:c7:18:39:9a:43:4f:47:80:97:6b:22:
25:7a:2f:56:41:fd:ba:7b:03:c7:68:01:4e:b3:de:
cd:dd:ca:b4:8b:71:bb:20:1c:aa:18:9d:69:10:82:
66:c4:50:44:06:b2:36:72:75:95:c0:68:57:37:ab:
62:2f:08:b5:03:af:d7:09:31:2a:46:3a:f8:9f:9a:
c9:6a:dd:54:36:08:ce:56:b2:bc:88:4b:90:29:22:
e7:45:60:fe:3f:56:9b:20:c7:af:1d:a3:1a:17:48:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:91:0F:EE:BE:B8:72:04:27:E6:2A:BE:B3:6B:F7:4B:3A:EB:64:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/6204d571-e803-3094-aba8-da4087c9cc40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
X509v3 Authority Key Identifier:
keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
sbgp-ipAddrBlock: critical
IPv4:
209.44.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:f6:c6:f4:ed:e7:dd:dd:0b:4e:f0:83:fa:a6:25:e6:97:8a:
6f:65:c0:70:d3:9e:1d:d0:fd:71:16:08:7a:b0:43:9f:0d:37:
53:08:cc:f7:5d:7c:75:d8:a4:53:9f:2d:3f:d7:67:e3:99:b6:
95:9a:2c:af:5f:11:d9:d2:f1:01:e5:63:11:8e:d2:fd:bd:2f:
b1:4a:14:24:88:dc:49:c7:d9:65:b3:a3:47:8a:81:af:63:df:
25:2e:cd:4c:be:b1:78:7b:6c:51:b1:7a:90:4d:62:25:8c:ce:
6c:a8:26:d2:50:fe:c5:a7:66:af:db:5e:47:01:0a:db:09:6d:
53:7f:17:e5:c9:ea:84:07:28:3a:eb:05:44:54:c5:d9:28:32:
a3:1f:b8:10:ed:96:66:7a:2f:d7:a9:f8:56:79:f6:1b:61:51:
d0:e6:64:36:2a:56:9e:cd:49:10:12:1d:3f:0c:7a:0b:0c:94:
11:21:a6:3f:e2:59:ae:28:56:ad:47:4e:81:b4:a1:05:b1:9c:
74:0b:87:5b:aa:a6:b6:7e:1e:22:29:44:14:89:39:53:c2:b0:
b9:d3:51:94:60:00:e6:4c:f3:c1:be:a2:b9:bc:5c:05:a4:c2:
96:6c:27:ed:5a:d8:a6:46:4e:cb:58:63:09:d4:c5:ef:60:03:
5c:d4:3c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:31 2025 by rpki-client