Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa
File: 639c1735-1cd0-355a-a116-4129dc8f68b1.roa (raw, json)
Hash identifier: qtVT2HUcvvCb/ip1cijAiXZMH2do5i4TV6mc6WrK13M=
Subject key identifier: BE:EE:B4:AF:8B:8F:E3:76:0A:48:BD:C3:94:97:08:7E:F2:34:EF:15
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F4328584917DC2A5AFCE95F0F2CB76A80
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 20471
IP address blocks: 209.124.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:2a:5a:fc:e9:5f:0f:2c:b7:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=35f74201-7288-4e7b-ae91-de1504ca781b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:72:ab:2a:01:05:b7:02:45:e4:96:cb:53:
27:2e:ff:aa:62:eb:f6:8e:63:6a:38:7a:bf:11:69:
00:df:65:c1:bd:37:d8:c4:76:98:c4:74:17:8f:36:
ee:f4:e8:fd:73:47:48:d6:5d:d4:24:b4:3c:49:cf:
3b:39:7a:ac:03:70:e1:0e:14:47:84:24:49:21:46:
29:72:c3:1a:8d:f1:a6:c9:36:ac:7a:06:e9:94:1f:
b0:34:a8:c9:dd:67:bb:6d:16:7f:99:4f:e2:74:73:
61:7f:43:0c:98:75:37:94:13:9b:b5:1d:8c:39:d9:
a6:72:f3:26:22:16:00:47:d4:db:3d:69:f7:64:46:
8f:00:dd:fe:75:d2:56:f3:ad:e8:4c:68:50:67:64:
63:0e:80:17:c6:d5:79:46:9f:e1:01:d9:04:4b:ad:
d0:38:2f:e1:0b:5c:d7:9f:0d:3e:a4:26:0e:e2:6b:
b1:f1:64:f2:96:63:20:04:df:cb:6a:21:a8:dc:9b:
6f:47:fd:62:a9:62:5c:2f:a4:e4:e7:92:5c:c1:02:
18:95:89:50:a5:62:1a:41:af:df:8f:2e:18:f7:8e:
3a:71:f7:35:bb:39:a0:f3:d8:bd:1a:f6:05:ab:ba:
92:d8:ac:ca:81:9c:1d:d6:a1:76:8e:c0:f7:ce:38:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EE:B4:AF:8B:8F:E3:76:0A:48:BD:C3:94:97:08:7E:F2:34:EF:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv4:
209.124.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:89:5f:51:68:02:94:79:5e:a6:ae:7e:2d:a4:42:16:51:5f:
48:29:2e:f0:1f:5d:fd:74:42:63:e4:5e:53:7d:9f:a4:b0:39:
1e:e5:5d:c0:b5:cd:0e:83:96:bd:05:3a:56:ca:6d:c2:17:f8:
19:44:e7:eb:4d:1a:5e:93:dc:f5:77:44:5e:ca:7d:51:67:f3:
d0:b2:de:93:4e:ab:65:ae:ea:4f:8f:bd:10:2b:a2:8a:0f:fb:
ad:44:e5:a8:fe:d4:e3:1c:a0:f1:e7:fc:0f:90:88:2f:a6:bc:
63:80:5d:08:15:55:26:41:06:c9:39:bf:ef:d5:4a:d5:9d:b1:
54:b4:da:25:6f:92:5a:b9:69:28:34:67:47:b3:0f:78:f1:53:
03:4b:3b:2e:f2:dd:d3:6b:8e:4f:97:69:36:64:fb:ae:42:24:
aa:f1:e6:30:a8:fc:23:83:08:73:51:dd:66:2f:c5:1a:26:31:
3d:78:a1:4b:0e:ce:18:d0:05:29:d7:54:51:7e:fd:32:e6:91:
4b:fb:2d:c8:99:af:9d:86:e5:f9:95:d9:46:e8:15:3f:3e:c2:
c5:65:f6:3a:66:3f:4f:43:58:f7:56:b4:b0:4e:69:47:a2:30:
6e:87:45:fa:de:03:be:5f:0c:00:0f:c2:c1:14:c4:e2:ba:c4:
f0:36:34:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:35 2025 by rpki-client on console.sobornost.net