Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/496bc6f2-9e7c-3877-9ad8-7c2416cc3bc6.roa
File: 496bc6f2-9e7c-3877-9ad8-7c2416cc3bc6.roa (raw, json)
Hash identifier: YPFNsGFc3Y57bXJj3IGIVzVGhP0JOc2X4DFRVWGX/E4=
Subject key identifier: 52:F9:EE:C6:4E:99:15:D4:C1:00:CE:0C:92:EF:F8:01:57:37:14:00
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285849166CC7E6DC56EC95C60AF100
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/496bc6f2-9e7c-3877-9ad8-7c2416cc3bc6.roa
Signing time: Wed 05 Mar 2025 13:40:47 +0000
ROA not before: Wed 05 Mar 2025 13:40:47 +0000
ROA not after: Tue 03 Jun 2025 12:40:47 +0000
asID: 53356
IP address blocks: 209.178.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:16:6c:c7:e6:dc:56:ec:95:c6:0a:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Mar 5 13:40:47 2025 GMT
Not After : Jun 3 12:40:47 2025 GMT
Subject: CN=fd6eb5f0-9613-42d3-b066-d97969ea1371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:10:a6:33:34:e5:71:39:ae:87:73:38:45:
93:99:e0:84:a8:9d:58:9d:cd:b1:f7:63:03:4c:79:
c2:92:21:c1:b5:51:d5:06:78:6b:7a:06:98:a4:4a:
6f:85:75:4e:d1:74:f5:d4:43:d4:1d:ad:cc:8c:eb:
bd:d2:60:9f:34:b8:82:14:61:c8:0c:d0:67:de:35:
dc:a9:77:71:9e:ec:ac:09:9a:ce:08:e0:9e:5c:94:
09:1a:88:a0:af:2a:5a:a3:3d:06:b0:c3:51:74:9e:
55:01:49:b1:a0:a1:1a:7c:2b:77:9c:68:3a:11:7e:
3a:66:ae:8a:6e:4d:fa:14:39:5f:28:24:b5:47:13:
f7:39:d0:d6:13:cd:37:be:29:ee:39:97:b6:14:67:
8e:c7:34:32:06:3d:08:75:81:95:5b:80:29:1e:b4:
f4:32:e4:d1:c2:7a:93:22:67:7d:92:3c:d3:18:89:
51:18:bc:79:5b:f4:0b:63:6c:cd:26:d6:71:14:b7:
e6:4a:26:73:5c:a4:ba:93:bd:45:3c:c5:12:e3:ca:
9f:b2:aa:b4:41:59:59:82:5b:35:09:90:5a:e7:8c:
86:a8:7a:34:13:d7:db:12:1a:b5:aa:0b:4a:75:16:
7c:bc:22:ca:1d:fc:98:8d:0f:33:c8:cd:c8:49:58:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F9:EE:C6:4E:99:15:D4:C1:00:CE:0C:92:EF:F8:01:57:37:14:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/496bc6f2-9e7c-3877-9ad8-7c2416cc3bc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:62:fd:2e:e7:f8:29:b2:81:a8:51:dc:db:3e:af:2f:2b:41:
5a:8d:14:63:35:34:c6:51:f2:3c:07:29:cc:44:7b:38:0d:e6:
e9:e5:3c:6d:61:03:40:f5:f5:3e:22:e2:b7:7d:49:07:70:24:
9c:79:de:80:d8:80:41:e4:a9:a6:8c:cc:12:f7:da:3b:f0:26:
74:10:63:21:c7:a6:8a:b5:ab:f5:dd:06:78:07:33:e1:88:97:
98:f4:35:6d:53:4d:a2:49:53:79:f7:01:13:f0:37:bf:6e:9a:
ed:53:80:91:23:b1:46:5f:06:3f:ef:84:d2:d1:e2:22:1c:57:
05:fb:ed:52:1b:68:25:bd:7e:d6:b7:72:45:c3:c2:63:9f:e5:
b5:7d:0e:08:01:fe:c0:b7:21:43:ef:40:e4:65:0b:04:86:57:
b4:ad:ff:f9:4c:c7:45:df:84:dd:ac:40:50:ec:92:73:e3:11:
9f:35:56:ec:5c:19:16:a8:9e:82:53:a7:f0:60:94:40:ac:30:
da:88:b1:fb:16:87:48:2d:ce:c1:9c:c8:f9:da:de:45:7f:e2:
62:ff:d3:3d:d2:89:bf:7d:e2:d4:e5:86:37:92:2d:35:77:e5:
88:5d:ab:88:15:54:04:8e:f4:a3:6e:8f:0f:94:0c:07:33:9c:
9a:f5:c4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:07:48 2025 by rpki-client