Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa
File: 041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa (raw, json)
Hash identifier: fThxOcmaVXx44yuMV/4aeAdZMJAaJPmvmuO7M4mkIwU=
Subject key identifier: 41:94:26:96:07:28:78:C9:C7:11:94:B2:91:8C:06:1F:BC:4B:67:2B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584913AC43CF7D31BE0674C3E880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 7342
IP address blocks: 209.131.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:43:cf:7d:31:be:06:74:c3:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=7c5c0735-9b43-487f-a12d-9e379a058480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:89:20:bc:9a:c8:f8:e9:27:6c:84:b2:22:22:
d6:dc:62:05:bf:0a:99:63:c0:76:fb:a1:85:d7:0c:
0c:1d:53:11:00:69:84:39:d2:11:b4:e3:63:d8:f1:
07:a9:6d:dc:7a:54:ee:98:35:b6:12:c7:38:5b:40:
33:c8:5f:a8:06:06:04:d0:5b:55:dc:e9:fd:be:48:
fc:83:cb:25:22:b2:44:d8:33:1a:28:e9:1f:ea:f7:
44:0e:f9:25:b9:66:61:41:7e:14:32:a5:59:36:ee:
63:6d:95:9d:7a:c0:0e:32:6a:20:3b:57:72:5b:dc:
15:7c:f4:b1:ae:db:23:e1:89:4e:33:24:49:7d:71:
27:0e:86:11:c8:7f:b9:13:a5:c7:b0:6c:af:74:f5:
a6:32:21:d3:4c:f2:eb:66:4b:cc:1c:19:63:6f:76:
bb:54:5e:fc:05:ce:56:68:eb:fb:a2:78:7d:5b:00:
88:3a:de:11:81:d4:ef:d5:4a:cd:cb:b7:fc:8a:df:
58:5b:89:72:88:14:90:df:45:f0:d5:3c:bd:8b:ae:
01:7c:32:87:9d:0d:9f:5c:e3:17:31:15:44:ae:f4:
85:6f:45:ab:c1:f5:e9:bd:71:c1:41:ec:7c:ad:0a:
a2:9b:6f:3f:b9:5e:84:1e:0f:65:99:0c:78:c6:93:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:94:26:96:07:28:78:C9:C7:11:94:B2:91:8C:06:1F:BC:4B:67:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:aa:18:92:f6:89:61:0a:c4:fa:cc:47:e0:c4:5e:40:48:a1:
03:32:a5:8e:b8:58:0a:1e:99:6c:89:22:84:e8:34:27:78:da:
ca:50:ff:b2:74:46:24:28:0a:05:eb:a9:ef:fb:b0:79:b3:d6:
86:85:6e:39:95:e8:e6:57:17:bc:52:2a:37:75:a8:ce:51:a4:
f3:53:f0:e4:d5:e7:f1:ac:97:74:73:af:a2:04:7f:4b:3c:bb:
1a:c3:70:c7:61:72:fe:9c:b1:ac:09:de:02:2c:5c:eb:0f:3c:
a3:ce:80:20:81:ce:26:cf:97:ab:ca:5a:69:b1:67:72:2a:19:
c4:d3:84:e6:bc:b1:bc:f6:dd:b3:bf:a8:c2:e7:99:1c:db:c1:
c7:10:a2:78:44:1e:fb:9b:ef:b9:5d:b0:94:6a:96:0c:91:6d:
0f:af:4e:d7:5a:af:c2:08:8a:39:b7:2c:f0:04:0c:ef:57:23:
4a:4b:f2:ba:26:5f:78:2d:c2:a1:f3:39:1a:1a:2a:d8:5a:14:
a6:94:a0:6b:ed:f3:48:9d:e9:a4:c5:cc:62:eb:2a:62:66:f2:
44:ba:de:de:e1:6a:cd:13:44:87:fa:40:e5:89:3a:eb:81:32:
6d:85:02:37:6b:b7:a9:85:a5:d7:1b:bd:e8:ae:db:60:24:89:
fa:cb:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:10:32 2025 by rpki-client