Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cedcd1a8-d28b-375f-8de4-bed8b6b528dc.roa
File: cedcd1a8-d28b-375f-8de4-bed8b6b528dc.roa (raw, json)
Hash identifier: ZhTJ62fD7EbiL6//nSmu9cSddht3tA3BSQSOX0JwsNs=
Subject key identifier: 74:38:7D:D5:BE:9F:86:0E:3F:35:8E:CC:6A:AA:92:EA:E1:65:81:B7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849287E56B2093DAA4FADE55700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cedcd1a8-d28b-375f-8de4-bed8b6b528dc.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 7342
IP address blocks: 209.131.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:56:b2:09:3d:aa:4f:ad:e5:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=40e0f16e-b569-4528-a4ef-65b7aef32234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:44:04:a0:4a:86:be:d2:37:2d:fb:8f:b6:
32:10:fc:07:c3:30:8c:c8:b2:01:e8:46:1b:0f:13:
fc:a0:ba:b3:2f:1e:00:69:a5:53:c3:08:e9:ef:f6:
03:97:62:ca:8c:76:85:7e:03:b2:b4:c3:de:51:0f:
0e:90:aa:62:de:56:3f:a1:a6:a1:e1:1f:11:2e:32:
f9:1c:fe:58:6b:25:c4:f6:a4:dd:a8:c3:fd:29:06:
59:98:46:3f:65:5c:f9:40:6f:fb:9d:9c:d9:4f:de:
30:50:a3:f2:ee:e8:c1:10:22:33:e7:f5:20:b2:83:
c7:58:17:dd:51:b0:3b:9d:26:d8:6d:eb:83:57:44:
9d:62:01:d8:12:e3:f9:cf:6d:76:fc:3b:3a:f7:44:
82:1e:31:2a:0a:b1:0d:8c:da:f9:0b:e8:c7:d4:e3:
82:42:e5:f3:5c:1d:be:aa:17:7b:fe:d6:31:ea:0b:
cc:8f:9c:7c:e9:a2:28:17:b2:57:37:73:82:73:ad:
19:88:96:4d:79:da:fb:f7:5e:cb:7d:ee:5a:98:80:
ea:0c:50:83:84:3f:6a:de:fd:40:78:e4:84:33:7a:
fa:aa:13:b0:94:b8:91:62:f5:28:dc:4a:4f:62:ad:
aa:0a:da:bf:a9:68:e5:0d:f7:b1:3c:c1:60:08:e4:
34:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:38:7D:D5:BE:9F:86:0E:3F:35:8E:CC:6A:AA:92:EA:E1:65:81:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cedcd1a8-d28b-375f-8de4-bed8b6b528dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:5d:96:96:4d:0f:68:11:f2:1d:17:20:9d:e9:64:fa:ae:b2:
61:21:e5:47:d7:e1:1a:4f:f1:dc:3e:5a:69:2f:98:94:ee:e5:
ef:9e:5e:f8:a1:08:8b:10:29:87:dc:4c:f9:3a:d7:b5:72:40:
e5:2f:ce:1a:9d:56:6c:31:83:45:2d:ef:68:74:39:17:8b:1f:
c7:81:99:17:e7:e5:03:85:76:a1:81:2d:6d:6b:95:55:a9:36:
22:20:b1:64:78:08:3e:40:0a:b3:40:28:5f:7a:69:1a:f9:f7:
5b:2b:11:2f:bc:c7:88:ee:85:66:d1:6d:98:9c:82:6f:88:f6:
8a:95:25:c1:08:46:eb:b0:38:e1:4a:c7:00:4c:89:c9:a8:20:
51:8c:ca:18:f4:50:9b:82:ec:d5:18:5b:7e:21:70:2a:1c:e9:
06:1d:0d:b6:01:b5:b7:4f:ba:e4:31:c7:0d:e1:9f:12:7a:e0:
42:7e:32:0d:2b:6e:57:0d:7c:1d:d0:06:80:74:04:f9:05:20:
47:fb:fa:c8:78:11:37:63:52:2f:08:f1:53:bc:b1:f5:c5:e2:
ad:fb:38:4d:f0:eb:84:b7:48:a2:e8:60:c7:97:39:31:6a:29:
81:3e:cc:16:61:31:fa:e4:c8:77:b5:d6:bc:10:eb:3d:de:19:
e3:1a:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:13:41 2025 by rpki-client