Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa
File: ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa (raw, json)
Hash identifier: uY+SxZ94Zh1S7iE/0CNsa9lF/KowNYPhnJV5bpc4BSE=
Subject key identifier: 29:32:9D:00:6C:6D:19:EB:10:72:99:1C:2B:A8:E2:FA:48:84:C5:63
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493C0937B97BF84237AC3483B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 7342
IP address blocks: 209.131.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:37:b9:7b:f8:42:37:ac:34:83:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=13c09c6a-618a-44b0-9aa6-b1dfea84a20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:40:34:7a:04:85:6f:a1:13:9e:a6:cd:a8:
7a:20:3e:a9:39:ab:6b:38:fc:10:3d:e9:89:49:9c:
17:63:21:ee:8b:55:0f:f8:31:4e:cb:bd:43:05:44:
7a:80:36:e8:d8:6f:d4:72:ea:ab:76:09:89:2e:77:
c7:8c:87:72:76:a1:4d:8b:c7:6b:51:01:30:80:e5:
86:e8:4c:14:47:fa:eb:04:ba:b9:98:e6:d7:66:1b:
96:50:32:f1:26:82:b4:20:be:38:c4:a3:f7:c3:02:
71:b1:12:3b:9b:1d:cf:94:9b:5a:cd:6d:35:ae:d9:
13:96:4a:91:59:e6:42:7f:81:81:a3:66:1b:ba:70:
e7:30:d2:ab:31:60:13:51:d2:92:81:5b:b6:f3:04:
0e:df:6c:ec:15:7c:c3:66:28:17:60:29:9e:11:f0:
62:15:76:ac:30:fb:b3:80:a3:bb:f2:60:f4:38:db:
3e:dd:fa:a6:36:7b:86:30:c0:61:e2:9f:9d:1c:10:
3c:6e:5f:06:4c:bd:b9:0c:82:a9:7b:11:52:b7:c1:
2f:72:a1:14:4d:17:57:d4:48:b6:9a:e2:2c:2b:d6:
33:0b:c5:92:bd:9d:0c:33:51:e0:aa:48:4e:53:73:
39:f2:fa:61:f0:2e:01:75:30:5c:1c:00:a2:77:c8:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:32:9D:00:6C:6D:19:EB:10:72:99:1C:2B:A8:E2:FA:48:84:C5:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:51:4a:37:6d:78:cc:1f:7c:ef:d8:1f:2a:31:63:14:4b:2c:
1b:d2:1a:0f:97:8f:09:0a:ef:89:bb:4c:cb:7a:44:8e:3b:32:
a4:ff:eb:af:e6:e5:61:16:5f:f6:e5:07:d6:d1:fd:80:4d:f9:
b7:d9:c9:75:13:a8:ee:56:2b:55:16:c6:0b:0a:84:de:74:60:
62:92:05:82:d6:92:f0:a8:f4:e4:59:83:17:f0:4f:0f:1e:e0:
77:1a:75:14:aa:fb:44:ae:11:6a:ab:83:c3:5d:96:eb:64:08:
6f:b8:3c:d4:f1:10:70:8f:81:14:52:8d:8a:5a:a2:a5:76:15:
0f:d6:9a:81:f2:17:6d:1d:27:2c:4b:4f:b1:59:35:4e:8e:14:
67:1f:b3:64:07:71:71:97:5f:3f:e4:0e:f1:35:8c:87:e6:d0:
8a:c2:cc:52:92:b0:cf:40:22:67:2f:71:71:48:da:bc:3d:8a:
e9:f0:a3:27:5f:0b:ee:98:c7:f3:aa:7a:21:b8:47:48:30:d2:
c0:36:06:11:95:d5:8f:80:ba:11:bc:a3:f7:35:28:5f:67:3d:
04:d8:6b:47:c5:28:f4:de:83:88:ac:71:e3:52:1f:03:ff:c9:
ea:02:a8:f2:d8:1c:fe:30:e3:a3:f0:02:3d:1e:0e:81:15:b1:
d7:c0:33:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:10:30 2025 by rpki-client