Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3efa705f-91fa-31b8-b37a-2e64bf636213.roa
File: 3efa705f-91fa-31b8-b37a-2e64bf636213.roa (raw, json)
Hash identifier: vOHk5jsowB8gyw9STBc8rUFXn25l3MaFCli8WecP1As=
Subject key identifier: CC:67:60:F7:48:3A:C5:49:CB:94:27:91:DB:7B:92:8B:C2:A1:81:A0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926BE8458DBE83740D54660
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3efa705f-91fa-31b8-b37a-2e64bf636213.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 395880
IP address blocks: 209.51.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:be:84:58:db:e8:37:40:d5:46:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=a319ddc8-3e9d-49f3-a26c-45c42c717ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:3d:c2:7c:21:b1:72:0f:2e:7c:ba:33:2a:
c8:60:d0:ba:ab:99:b0:8e:2a:34:c4:18:ac:d8:5e:
34:e1:6c:14:52:2a:c9:71:44:d5:84:37:a6:0a:4b:
5e:14:89:26:6d:63:d3:1c:c4:d6:61:da:1e:4a:49:
ff:85:ea:6a:6b:69:bc:9b:bc:dd:8f:8b:94:d0:93:
2c:6d:c1:e7:01:4a:77:3d:6a:b1:b8:cf:e0:7d:f3:
1e:58:ba:87:ad:40:f6:c2:98:bd:fe:10:6b:25:7d:
fa:89:97:fb:cf:1b:ad:0a:7a:44:3f:79:e5:f6:95:
1e:59:7e:f6:e0:7c:b1:b6:f6:f1:1b:6e:b4:41:48:
3e:db:d7:20:c8:7d:bb:da:25:64:de:d0:9b:57:02:
23:de:92:e2:54:5f:a4:fa:d1:22:e6:14:22:16:06:
57:80:b1:ed:f6:2a:90:47:90:44:56:e4:31:e0:18:
9d:5e:cc:cc:4b:61:9d:09:39:2f:31:82:63:88:61:
65:48:79:21:66:66:c9:3b:8e:3f:2d:34:e6:ce:fc:
5b:52:ec:ab:5f:93:75:6e:05:68:ad:b4:cf:1a:0f:
10:d4:a0:5d:45:a4:a3:f0:57:47:3f:3e:a0:9e:6b:
18:de:70:1f:f7:2f:17:32:dd:f5:41:54:b9:8c:5e:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:67:60:F7:48:3A:C5:49:CB:94:27:91:DB:7B:92:8B:C2:A1:81:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3efa705f-91fa-31b8-b37a-2e64bf636213.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:3c:b5:86:a9:75:5d:b6:3b:6f:fb:57:6c:70:f6:cc:53:58:
cf:67:3b:b3:6a:67:bc:97:e4:ee:4a:6f:3a:ff:78:1b:ac:b2:
24:01:ec:15:c9:25:ee:9d:a8:ae:0d:e3:9b:7c:2b:0c:12:d4:
b2:ab:71:37:0d:4d:d2:7e:39:33:3f:5b:6e:a0:14:6d:78:20:
e6:97:bf:65:ed:29:a2:b9:ce:7c:6a:8a:a6:bd:b6:ed:4b:be:
3f:6d:51:ac:47:fd:25:04:17:d8:e8:e8:46:79:b2:f6:64:56:
ed:a2:37:02:1d:e1:ba:8c:ff:01:1b:d6:88:90:f9:eb:16:1f:
6c:09:5a:f4:34:48:ba:15:87:46:13:6b:40:72:a5:57:0d:32:
cd:63:ac:77:87:62:b9:22:ce:bc:58:6c:03:bf:ee:94:dd:32:
53:4f:d3:72:dd:41:ae:ef:c9:c5:35:df:c1:53:50:cc:fb:10:
0d:88:31:18:37:a6:99:64:28:18:35:69:46:16:67:b3:b2:b8:
98:5c:1e:91:fa:96:50:db:97:0b:17:57:4a:77:ce:2b:d1:82:
57:09:97:87:1c:ae:b5:34:4d:a8:e3:2a:72:ac:76:9e:30:19:
89:af:d0:90:9b:2a:76:c6:81:42:5e:71:b0:a9:81:eb:e4:87:
5b:10:25:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:00 2025 by rpki-client