Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa
File: 301685f9-eb30-346d-a98c-6f6531412033.roa (raw, json)
Hash identifier: eGBoQ0PQ1aBxI4aVcpdZbCtO/LLJmW7eSXTwdTl4b/Y=
Subject key identifier: E1:A9:10:93:66:4B:EF:53:BD:8D:5D:A1:66:06:90:82:EF:1A:7D:24
Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial: 010D0C9F43285848E9CBE8E434771C9EAEC3A200
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 209.114.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e8:e4:34:77:1c:9e:ae:c3:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=2070a693-1e1c-4eac-985a-2b3e2685766c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:b7:2b:70:8d:d6:43:bd:f9:77:79:c9:b0:
d1:06:f8:bb:4e:a8:0a:8d:8d:c2:be:bc:61:c2:f9:
d3:fe:7b:c9:e8:64:0c:8b:30:f5:57:7e:82:61:9d:
5e:34:d4:a9:e5:33:f4:cf:ea:97:b5:24:33:03:52:
28:30:e0:0a:d0:db:7e:06:5d:14:36:7d:83:17:f4:
7e:30:ee:be:db:e1:df:82:94:61:fe:15:58:0c:23:
3b:0d:09:9b:4a:e5:87:d8:d9:f2:15:29:3c:cc:d1:
de:f4:f0:8d:68:98:15:f2:25:51:76:0c:5e:c7:91:
89:a3:3d:61:46:09:40:b0:27:6a:b0:f1:45:81:d6:
89:2e:ce:e1:f1:83:22:53:ff:58:a2:c7:63:fc:47:
94:79:14:f9:cb:a8:8a:e1:62:fc:90:1e:fe:3d:c5:
4e:6a:08:fc:eb:15:95:3a:69:cd:42:79:07:e0:5a:
38:8e:8d:f6:60:ff:c3:1e:b5:25:d1:d5:a4:08:55:
53:76:54:3b:24:e0:4f:7d:37:64:c1:89:ac:36:ce:
ac:78:ba:c4:05:49:26:1b:e8:28:95:ee:53:b1:63:
d2:cb:30:63:98:ff:c0:9d:51:93:62:46:29:01:ae:
f8:ea:8c:30:45:5b:6f:f7:1c:29:7e:52:3b:12:ea:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A9:10:93:66:4B:EF:53:BD:8D:5D:A1:66:06:90:82:EF:1A:7D:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
X509v3 Authority Key Identifier:
keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.114.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:f0:10:ff:ee:d7:20:55:7d:3c:68:7a:79:2b:36:1c:61:fb:
88:36:35:2f:9c:1b:12:24:90:dc:db:4b:f0:dc:cc:3f:be:61:
eb:c2:85:4a:47:84:54:e7:15:22:5e:8b:cf:1c:b5:79:19:3b:
f2:32:05:45:1d:3b:71:94:0c:d4:da:6b:f4:44:a7:04:3a:93:
0d:64:71:fe:4b:57:1e:94:ab:2f:79:5a:ce:bd:e0:18:b3:18:
f4:59:74:bd:d0:94:33:1b:3f:88:af:a3:3e:20:65:20:34:1b:
0e:12:4f:84:07:51:35:d4:3d:e4:fb:b5:6d:e7:9a:7e:38:54:
b6:69:26:a0:29:8a:cd:29:41:f7:ee:7c:f7:70:59:9a:85:87:
5b:cf:66:f1:ec:b9:bc:fc:3b:74:9c:c9:78:bf:3a:66:35:ec:
72:a3:aa:a7:7a:33:fd:66:6b:8a:ae:34:aa:54:fa:43:49:3c:
ee:4f:c0:f9:d7:cc:16:e0:01:0b:63:36:11:4b:fc:be:2e:57:
c3:9f:9c:48:72:26:44:34:74:09:43:d7:7a:32:49:c7:41:15:
cb:a1:22:54:2b:cc:6a:a0:07:76:a9:6f:b1:db:b3:3d:dd:cc:
d9:2a:55:e3:37:6f:a6:1b:c7:4d:d7:b9:30:af:1f:b0:2c:d8:
c0:f4:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:44 2025 by rpki-client