Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/c4d648ba-7b48-3383-9d6d-8c9a6d29b009.roa
File: c4d648ba-7b48-3383-9d6d-8c9a6d29b009.roa (raw, json)
Hash identifier: I0KlgRj7Xr9RUrx7cuxSutFGunAhMn1WZ+iSU03AzHM=
Subject key identifier: 60:7F:C1:CC:19:0E:93:C8:C2:E8:AD:BC:5C:64:2E:F9:A2:D5:4F:E1
Certificate issuer: /CN=4c96ceab-4c5d-4801-82cd-913921cb3c49
Certificate serial: 010D0C9F4328583AFE3386B3F0550E89CF31EDC0
Authority key identifier: B9:C2:15:9E:1A:D8:FC:BF:F7:89:E8:75:4E:1A:23:34:86:4E:AB:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/c4d648ba-7b48-3383-9d6d-8c9a6d29b009.roa
Signing time: Fri 28 Feb 2020 05:00:00 +0000
ROA not before: Fri 28 Feb 2020 05:00:00 +0000
ROA not after: Sun 23 Nov 2025 05:00:00 +0000
asID: 3356
IP address blocks: 209.194.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:fe:33:86:b3:f0:55:0e:89:cf:31:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c96ceab-4c5d-4801-82cd-913921cb3c49
Validity
Not Before: Feb 28 05:00:00 2020 GMT
Not After : Nov 23 05:00:00 2025 GMT
Subject: CN=6f03ba4e-94ec-4201-843e-b0675c3c2d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:07:f9:f1:47:79:4f:70:7a:6a:93:a5:d1:
e9:b8:a2:f6:f5:81:c9:cb:d2:1e:3c:fd:fe:d6:63:
86:85:4e:97:e6:1f:ec:b3:6c:79:79:ef:a3:6e:4d:
df:a7:64:df:6b:ee:05:37:67:d1:0f:4b:45:c9:5a:
4e:7b:c5:a2:2b:76:dc:01:c2:2d:ad:38:02:21:0d:
2d:1a:a1:49:cd:d6:65:9b:45:df:f6:a1:2f:9e:2b:
7f:7b:62:c2:f8:45:a6:27:08:b1:73:63:f5:93:1b:
92:58:13:18:55:d1:0b:a9:53:98:83:dc:a6:f9:22:
64:3f:04:ac:63:14:f3:cf:fc:85:ad:c2:55:42:5d:
53:a2:b3:7b:3c:38:96:e7:20:55:26:76:c7:4c:00:
d0:05:6c:7c:06:c7:b4:41:e4:01:7c:c7:0a:53:85:
d7:60:33:2e:c0:19:d7:af:c4:ca:84:3b:eb:96:23:
d7:16:24:ec:c7:11:ee:ae:3e:93:ba:95:bc:9c:f8:
a4:97:cd:77:04:8a:43:cc:d5:30:02:e6:7b:d2:0f:
b6:c0:57:e9:c7:6c:7a:0c:01:f8:be:6a:a4:d5:3c:
f9:b4:04:82:7a:fc:42:cf:57:a0:24:41:20:97:3a:
1c:ac:0c:b0:4c:8f:bc:26:97:56:0d:70:41:a9:b7:
b0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7F:C1:CC:19:0E:93:C8:C2:E8:AD:BC:5C:64:2E:F9:A2:D5:4F:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/c4d648ba-7b48-3383-9d6d-8c9a6d29b009.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/4c96ceab-4c5d-4801-82cd-913921cb3c49.crl
X509v3 Authority Key Identifier:
keyid:B9:C2:15:9E:1A:D8:FC:BF:F7:89:E8:75:4E:1A:23:34:86:4E:AB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49.cer
sbgp-ipAddrBlock: critical
IPv4:
209.194.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:60:e8:cb:b0:40:a6:2d:c9:69:04:20:89:82:83:1b:21:4d:
a4:44:6f:6e:e9:75:64:51:5c:f2:c1:e7:c7:fc:fd:92:84:db:
97:8b:28:f4:d9:ea:d4:d5:c3:57:03:44:57:57:16:84:46:74:
55:f1:c2:97:6a:72:4e:80:41:df:f9:76:98:42:5c:5e:06:57:
e7:de:5e:b9:67:af:53:4a:33:aa:96:4c:32:67:a3:31:69:e6:
af:76:f6:71:53:90:89:8a:7a:91:e9:36:7b:9e:80:10:3c:3b:
c3:05:bf:1c:85:c6:e3:3e:99:e6:c7:63:ff:1c:8d:06:83:1f:
c0:b9:21:2b:0a:9a:db:7b:72:c9:0b:2a:78:65:a8:b0:a8:1e:
7e:54:1e:86:74:d3:de:c2:d0:ce:8a:29:34:f9:7e:e7:cb:1c:
37:49:ef:fe:ef:14:ee:ab:79:79:9e:5a:0f:c3:04:2f:28:bf:
bf:57:75:37:31:e3:d2:8a:a5:33:20:27:c7:8a:54:b1:f9:b5:
13:00:97:25:b3:98:b6:5b:24:9f:90:7d:b0:c3:fe:50:84:69:
1a:dd:95:7c:03:41:da:0f:b2:54:9b:66:e6:f5:9b:00:05:fe:
65:63:a3:e4:c5:b1:96:f9:98:3a:e0:f7:86:2f:42:b3:68:db:
fb:98:ef:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:59 2025 by rpki-client