Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e961ff3f-f997-35d9-826a-2dba732b2785.roa
File: e961ff3f-f997-35d9-826a-2dba732b2785.roa (raw, json)
Hash identifier: PDjn44f7TROlG0z6gLyW0aELVeEbAhLFVCBXtbRgvzI=
Subject key identifier: E3:52:06:7C:8F:B0:A6:17:1E:A1:71:35:FE:9D:5E:DB:54:AA:84:E3
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F43285848897B219EBC6F8CF4BE35B304
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e961ff3f-f997-35d9-826a-2dba732b2785.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 2152
IP address blocks: 209.129.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:21:9e:bc:6f:8c:f4:be:35:b3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=4dc8509c-bc89-4677-a25c-1a9bce3cb810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8f:e8:1f:5f:d7:b9:ec:5e:75:75:4a:42:9a:
db:c6:ec:a4:ff:0b:e6:91:4f:06:a1:26:50:aa:01:
bc:27:b9:ac:f2:99:66:ce:12:d1:21:9b:03:ef:70:
29:12:8b:52:06:1c:1c:be:9a:52:55:d5:d4:35:c9:
7b:61:ae:ec:b9:ae:a9:ad:31:19:7b:57:d3:6e:52:
8f:45:0b:2f:41:92:47:e8:df:69:e2:29:ce:22:d0:
c4:36:6a:60:2f:e2:b6:ca:45:c5:e7:67:48:81:e3:
c6:17:a1:64:d0:ab:6e:92:cc:fe:c3:cc:5b:7f:1a:
d3:4d:7c:97:6a:3c:7c:42:98:54:b3:bd:38:b1:02:
82:bb:ed:94:b1:49:05:64:16:74:14:77:11:bc:67:
b6:d8:4a:50:3d:b7:8c:09:d1:45:de:d1:d0:10:6e:
ab:b9:02:3b:05:9b:26:06:81:45:2f:ef:a7:1f:37:
4c:f8:d0:1e:da:13:6d:52:6d:d9:c5:e1:0e:5e:82:
83:f9:22:5b:70:a7:ea:d3:b7:e8:5d:29:7b:9e:d9:
a5:30:84:26:6a:0a:68:19:3b:81:c9:b8:d7:d6:84:
58:cf:c3:d1:5c:04:76:e4:d7:b0:b3:8c:24:af:7a:
d8:23:b7:2c:3b:81:1e:0a:fb:70:a0:79:03:d9:30:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:52:06:7C:8F:B0:A6:17:1E:A1:71:35:FE:9D:5E:DB:54:AA:84:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e961ff3f-f997-35d9-826a-2dba732b2785.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
209.129.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:24:6b:f1:1c:5b:9b:bf:6a:65:a4:01:42:aa:a8:ba:9d:4e:
39:e0:a8:6a:49:16:70:a1:2c:1f:51:4e:06:17:f0:dc:c7:43:
9c:ba:eb:b8:e2:83:dd:5c:a6:bf:6d:a3:9b:2e:b3:67:83:88:
55:a6:e3:59:4f:8c:7a:21:3e:22:6c:8c:8b:56:50:cb:7f:34:
88:fb:7c:b7:58:81:d7:22:8b:cc:0c:4f:a2:a4:81:01:40:d4:
3a:a0:78:be:f8:33:3a:8c:80:ec:c4:77:33:72:e8:b5:4f:fe:
4d:d4:37:73:83:f2:2f:da:12:a4:ed:19:00:70:c6:a4:ae:e3:
06:45:a7:0b:65:3a:12:6c:27:55:a1:d0:08:a9:b5:17:04:54:
e3:2c:e9:23:92:79:50:0a:48:51:c7:c6:09:d0:5f:f8:db:e3:
2b:27:b9:b1:b1:83:df:ff:56:81:b5:a5:79:80:c3:e3:36:25:
3b:64:38:e6:b2:86:03:d6:35:e2:53:62:96:f7:fc:04:fe:39:
92:6d:fd:0f:93:8b:eb:bc:c8:de:69:58:b2:13:34:25:dd:70:
f5:57:5b:4a:ae:70:e0:04:b6:a0:b9:39:24:24:c5:50:bc:b3:
21:37:c9:8a:16:da:43:3f:10:47:a5:c7:99:c0:0a:b5:21:71:
0c:45:f7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:30 2025 by rpki-client