Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa
File: 3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa (raw, json)
Hash identifier: 1C+6LcAo34Vj9esJ8Q3I6DSkiFKad6rrxT+6dSQ4xaw=
Subject key identifier: F5:1D:2E:DF:C1:4E:05:18:0A:AF:69:21:4D:B1:A0:CF:25:6A:3B:14
Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3
Certificate serial: 010D0C9F432858487A2074B58A13ABD7E5BA3120
Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 394353
IP address blocks: 199.9.14.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:74:b5:8a:13:ab:d7:e5:ba:31:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=d4e8fc41-35c3-4ce8-9f3e-073666c825a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:c5:03:d7:f1:62:68:69:d5:48:13:f0:7f:
67:4f:e5:70:60:af:05:7d:44:21:72:44:78:3a:e4:
88:69:10:98:9b:89:33:e2:38:4f:5f:13:38:e9:f7:
ff:8c:ba:9f:ab:4c:ed:41:39:81:e7:e8:96:49:68:
58:e0:26:f6:23:d3:c3:6f:e6:e4:45:06:de:b9:89:
74:fb:01:5e:aa:ef:64:35:56:af:f1:54:16:3d:9e:
d3:e3:79:55:fa:6f:af:17:a7:ca:51:7c:3e:97:56:
4c:39:bd:a7:b0:f0:f0:e4:82:5f:60:68:3c:15:d6:
2c:b9:6a:e0:16:8f:85:86:72:86:2a:6b:df:85:32:
4f:26:9f:5a:35:e8:d5:ce:77:be:67:2a:b3:9c:00:
12:2c:40:fa:ee:2a:cf:18:c9:3e:fa:8a:1a:16:70:
3f:8d:24:ca:f2:67:e2:a9:ec:8f:ab:a2:88:3a:9f:
64:d8:5f:e7:b2:98:17:ad:24:a1:c6:de:94:f3:b5:
27:7c:ca:11:7e:e1:4a:f3:6a:7a:e3:f6:3c:f7:e4:
cc:13:3a:e3:ec:2f:b5:9c:b7:94:52:a7:e3:f5:34:
39:fe:6f:fe:38:51:13:a8:7b:a9:81:bc:c3:54:ac:
29:c6:03:65:e6:5e:99:60:f9:85:63:b6:f1:db:06:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1D:2E:DF:C1:4E:05:18:0A:AF:69:21:4D:B1:A0:CF:25:6A:3B:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3dfc906b-f994-3ab9-93fc-f2f49db08aab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl
X509v3 Authority Key Identifier:
keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.9.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:a4:da:3c:92:ee:ce:b8:0c:b5:77:40:6a:f2:96:c9:48:69:
a5:eb:a6:b3:ea:7e:40:dc:4c:6d:c9:65:23:ba:82:a9:4b:04:
48:e1:d4:e0:00:4e:43:e9:a0:52:6b:87:18:0c:ce:40:b8:9e:
d5:76:98:d0:b4:ef:b4:42:c4:c6:d7:f4:55:b3:f9:4a:45:20:
56:af:13:cb:a8:9f:ea:cf:3a:ab:0a:19:61:bb:bb:d2:f3:a9:
04:53:3e:8e:df:7d:b0:8a:dd:3d:b1:aa:26:10:1a:6e:d4:bc:
4d:b5:a1:cd:08:93:2e:be:73:55:ec:62:06:ac:e7:2c:e7:e3:
c5:78:2b:01:33:f1:ae:8f:1c:d0:7b:4a:5d:24:5f:5c:14:6f:
b1:74:45:1b:34:ca:1a:a1:d1:49:c6:b6:7b:7c:c8:90:29:88:
16:1d:cb:67:3a:67:a3:54:fc:77:6c:81:22:f2:ce:bc:5a:87:
84:47:6f:c9:81:19:2f:ae:fa:9a:a7:42:6a:f6:fc:6f:45:b1:
07:4d:ea:33:fe:3b:bf:ae:4f:e4:1b:07:8e:f5:e6:06:f2:74:
5f:04:2f:12:83:6d:1e:ec:d8:53:84:35:80:c2:00:3e:55:0f:
6e:ae:eb:9e:d6:97:0b:65:c7:c3:63:04:ea:a4:d5:58:79:42:
86:90:a2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:19 2025 by rpki-client