Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
File: 23242619-7075-3ff7-bc60-bde9eb53b0dc.roa (raw, json)
Hash identifier: e8wEG9R+aReuFj42c2CnIsc+YG+TpFmrxk776uL8CLY=
Subject key identifier: 52:13:D8:29:D4:7A:CB:FC:5C:F8:4E:A2:08:B0:36:AD:D4:D2:F1:DA
Certificate issuer: /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2
Certificate serial: 010D0C9F432858494B63FC581708A57588BE7380
Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 14618
IP address blocks: 209.46.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:63:fc:58:17:08:a5:75:88:be:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=1733cb1d-69e5-4483-83a4-18b567d6fb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:dc:b2:66:a2:58:77:e8:81:a2:ed:95:1a:
ae:11:24:9a:91:bd:8c:72:1a:dd:7b:5f:0d:fd:f9:
1a:7e:c2:b8:65:91:0e:98:f9:15:e4:ab:6a:a3:d2:
4a:7e:e5:19:ca:8f:1a:63:05:f1:83:b0:42:cd:c4:
11:30:70:21:71:da:a5:de:64:d3:fe:0d:80:3e:0c:
2d:6d:18:c6:37:5f:71:1d:9b:f2:04:21:4e:4f:df:
c5:a2:fd:08:92:fd:69:86:0c:5c:89:08:8d:5b:4b:
f9:5d:c6:b4:64:16:eb:8a:c3:e8:44:c7:06:ff:d3:
bd:88:cd:14:38:21:4e:1c:f3:be:74:32:31:f1:fc:
3a:7f:12:f3:6a:7d:5b:14:b2:3e:bf:53:cc:38:ba:
90:0b:68:10:98:06:3b:30:ef:0a:a2:47:31:64:71:
b9:6f:b8:cc:8f:3a:39:e0:c4:ed:69:32:45:9f:37:
db:bf:d1:b5:21:88:a0:75:12:49:0f:86:3d:24:5d:
5a:e4:1a:79:8a:a8:59:84:7d:8a:c8:a7:1e:eb:b7:
34:08:70:de:0f:2f:08:56:84:1b:71:20:6b:2c:ec:
c4:28:c2:df:f1:2b:63:18:14:14:33:da:33:24:0d:
22:fe:e2:b8:04:b1:08:b6:b4:af:e9:b1:9f:79:91:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:D8:29:D4:7A:CB:FC:5C:F8:4E:A2:08:B0:36:AD:D4:D2:F1:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl
X509v3 Authority Key Identifier:
keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.46.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:ce:2c:18:25:3b:f6:2a:80:e7:c4:f6:0c:94:d0:74:3b:d7:
77:86:94:c8:6b:54:58:42:8c:13:0c:25:59:88:38:c6:9c:df:
3b:d4:b0:ed:68:79:4c:2b:b1:0a:3a:9b:e4:cf:0e:1d:ba:78:
14:13:2f:bc:14:37:a0:ce:9b:55:aa:75:47:58:63:a4:c8:ce:
da:67:38:1d:01:5b:7d:62:48:7c:1f:89:a5:2b:58:93:3f:2a:
c9:52:5c:c3:4a:b5:ce:9c:6b:8e:b6:68:d7:5d:da:43:7b:34:
3b:11:c0:9c:c7:d9:be:07:6c:89:f8:32:98:fd:2f:fe:88:31:
b4:23:19:46:4d:4b:15:2e:aa:c2:b7:f8:c5:6b:59:77:10:f1:
c7:06:42:fd:68:e6:21:d6:34:12:d1:fe:4b:bf:9e:d0:c0:02:
33:47:ff:48:1d:4e:4e:c5:a3:ad:16:f0:3b:f1:71:96:5d:14:
f0:d4:66:5e:66:02:02:bf:4b:00:fa:82:b5:35:36:60:ea:36:
36:d3:90:b3:3c:e2:b0:8a:e9:36:08:5f:2e:e7:90:e4:fc:66:
71:4e:76:5b:93:79:8d:5b:70:fb:a2:83:87:e7:a9:01:c5:a2:
87:01:8d:83:6e:00:5e:c8:d1:6a:8e:70:34:cb:2b:ed:bb:72:
e6:9c:53:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:20 2025 by rpki-client on console.sobornost.net