Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65520d72-62e0-3896-900d-cf2c3b3cbe42.roa
File: 65520d72-62e0-3896-900d-cf2c3b3cbe42.roa (raw, json)
Hash identifier: z237T8kQJBC415BNcr5FvyKxEvShcdiUDEYLuUeNUsU=
Subject key identifier: 26:C6:9C:B2:2D:EB:BE:40:5F:42:88:A5:54:BF:3F:A2:0E:DF:28:48
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493C093449AED371BA1B5CE400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65520d72-62e0-3896-900d-cf2c3b3cbe42.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 7342
IP address blocks: 209.131.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:34:49:ae:d3:71:ba:1b:5c:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=39b470ac-690b-43b3-a275-2642f2064766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:d7:86:13:05:19:a9:f4:21:c8:22:17:3b:
04:de:87:06:aa:7d:33:c7:c4:fd:d7:1d:43:95:8e:
bc:12:95:15:18:85:3b:0c:69:20:ee:a6:32:f6:a5:
65:2f:99:dd:7b:1d:e9:94:99:2d:94:61:cb:5a:0c:
a6:89:6c:22:85:71:08:75:a5:ed:2b:e3:07:a3:ff:
b6:6d:2b:d8:85:92:f7:77:5a:14:9a:60:ac:1f:6b:
e3:18:b1:5d:af:6f:39:b9:c7:e1:f4:3c:00:a2:65:
8a:ef:5d:5c:99:05:95:66:5a:a4:25:5f:12:d9:1e:
73:63:c0:67:43:62:dc:72:38:4c:d6:cf:5f:1e:7a:
5c:a3:42:92:e8:b3:b1:64:e0:44:e4:41:63:76:1e:
58:1c:d3:f6:62:5a:aa:d0:78:d4:1c:7b:98:3a:e6:
9c:b7:bc:9d:86:df:12:6f:63:ab:cb:2a:be:33:95:
2e:5b:11:ba:87:18:1c:c5:44:d0:05:ec:19:6d:b3:
5c:e6:e0:46:37:2b:93:8c:a3:fe:72:f0:bf:eb:91:
ed:aa:cf:b0:74:18:85:2a:8d:59:77:01:ec:fd:9d:
71:8d:80:c9:53:87:6c:50:55:ad:aa:98:e4:79:43:
55:f3:66:35:e1:5a:49:a1:ef:48:0b:48:0c:6c:9d:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C6:9C:B2:2D:EB:BE:40:5F:42:88:A5:54:BF:3F:A2:0E:DF:28:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65520d72-62e0-3896-900d-cf2c3b3cbe42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:28:af:a9:a8:2e:ae:22:ec:1c:87:c6:94:fb:a6:7e:eb:bf:
59:e5:96:7a:01:a0:ec:5e:31:a6:ad:5c:e6:2d:f3:f3:f5:a4:
b6:6d:6f:fa:84:e9:04:2a:47:4a:b8:47:73:c0:85:bf:9f:33:
8c:ad:02:2d:a1:70:97:e3:c8:78:ee:de:29:8b:2b:2c:80:f2:
a8:33:90:a9:67:bf:fd:48:b6:35:b3:f4:9b:02:54:bd:43:a9:
b7:5e:f1:61:01:00:41:2e:cd:88:74:d8:0d:56:6a:76:d4:e2:
1f:3a:aa:1d:18:d0:7b:89:1f:ab:b9:d1:49:60:7c:3c:eb:26:
33:0f:3a:2d:bd:d4:ee:a8:65:14:38:83:84:b8:bd:b6:3c:70:
49:66:43:1e:5f:e8:31:66:6c:5b:d8:f0:9f:41:dd:89:f8:2a:
c5:bb:c2:3b:c1:fe:fd:74:cd:fe:85:57:c7:61:56:c4:cf:c7:
e6:d7:df:1d:c5:c1:4e:53:ce:11:09:b9:df:71:7a:fa:28:6d:
7c:04:e2:7a:cc:46:ff:8a:e5:43:1f:a7:ba:a6:4d:c6:44:6d:
6d:1a:d1:1d:03:98:99:31:aa:91:b7:f2:70:78:92:89:46:8c:
9a:ca:48:85:c3:38:ed:74:14:f8:77:7e:5f:05:a9:32:b0:be:
0d:64:95:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:34:48 2025 by rpki-client