Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa
File: 91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa (raw, json)
Hash identifier: 0+MX32bTOsNDRZyT/UJZr6B6GKNDDBYoYG2xUj4MquA=
Subject key identifier: AB:6A:D2:52:F5:1C:3B:4E:AD:2D:1A:9F:30:E6:76:EE:63:77:18:FD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849350EBC72C579A3351848F200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 7342
IP address blocks: 209.131.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:bc:72:c5:79:a3:35:18:48:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=99a00323-d6a8-4576-831e-0ff612814370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:24:bf:d1:f0:fb:a3:f0:c5:62:96:5d:23:
c7:f1:a3:5e:3e:e5:60:fb:39:75:46:1b:ab:c7:c7:
1f:6f:3c:e0:55:72:7b:28:93:e4:b4:5c:28:37:cc:
61:22:92:f9:09:58:ca:d3:88:01:82:6f:95:11:7d:
dc:ee:1a:ea:36:b4:5d:7e:84:aa:55:22:4d:54:3a:
a8:28:6b:44:55:3d:f3:ce:b2:15:ac:6e:5a:d2:f2:
a8:85:88:57:f1:25:71:92:44:d8:aa:e1:15:0b:12:
9f:41:0b:aa:67:0f:c7:a9:b1:4e:23:d8:96:87:44:
10:77:44:99:70:89:55:08:f9:ba:41:ff:0c:2b:29:
a4:77:38:16:11:93:5f:ee:e3:e5:b7:71:2f:12:61:
7e:50:cc:c9:eb:48:75:53:8a:1a:19:69:bb:4c:37:
76:09:03:83:92:c3:db:ae:e8:92:c6:50:1d:2e:90:
e2:26:c4:c2:c1:c4:bf:24:c1:01:6a:ff:0b:d9:a6:
70:b3:3d:c8:e4:6c:43:f2:21:81:46:46:d2:f7:19:
05:4a:e0:33:3c:7f:53:f4:b6:b9:87:82:62:ce:bb:
64:23:a3:7e:8d:15:a6:4a:86:af:e7:24:0e:e5:12:
10:27:2e:f4:ca:6c:3b:a2:68:5e:43:d1:a6:15:ad:
e4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6A:D2:52:F5:1C:3B:4E:AD:2D:1A:9F:30:E6:76:EE:63:77:18:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:d5:d5:98:86:ee:d9:bb:8e:ae:d7:c3:1f:52:62:22:dc:50:
5d:b6:7e:18:35:ee:e1:f5:a9:cd:0b:0b:12:35:bb:d8:98:27:
cc:8d:b0:0b:8e:4f:99:17:0a:0f:c5:e0:54:51:ad:ca:e8:7f:
59:31:a0:1a:1a:e0:40:71:50:76:71:21:9d:4d:9d:a1:55:ed:
5b:aa:8f:14:ee:ce:56:b7:71:81:46:c5:3c:52:6b:b5:cb:04:
92:07:e0:c3:e5:ff:a0:21:28:db:32:31:18:bb:ab:6f:2f:f5:
18:3c:bf:0a:1e:f5:d4:bb:02:dc:ec:b8:c6:e5:68:a9:e1:61:
a4:07:71:28:d3:dc:73:6a:6e:3a:67:d3:cf:88:f1:7a:47:82:
83:f6:2e:c7:ca:6f:29:db:a9:53:ae:b2:c5:75:d5:1e:df:03:
a6:2e:54:df:ba:39:68:ba:51:88:52:9a:fa:59:19:aa:4b:77:
12:5b:4d:3c:56:92:a4:05:c7:14:d1:54:25:17:b4:82:9c:0d:
7c:f5:c3:39:1a:c6:ed:6d:c4:aa:26:db:67:14:e1:09:93:1c:
8e:b2:b5:d5:d0:4f:f8:f3:b5:71:80:55:e7:43:45:d3:b4:52:
e6:9f:28:6d:9f:3a:be:b5:0a:b2:7e:ee:ef:13:f1:14:46:4c:
bb:a5:1d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:00:13 2025 by rpki-client