Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f7a20a53-9f00-3a53-9e38-bc73bcdd932d.roa
File: f7a20a53-9f00-3a53-9e38-bc73bcdd932d.roa (raw, json)
Hash identifier: D848Q84e02gN2VSMtNEWbarMWiuVeU+RoH22U4Wf/uI=
Subject key identifier: E0:E6:76:F0:D5:03:0F:21:52:5D:76:8D:BE:51:4C:8F:2A:69:F1:F7
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F432858491AA6C1767A4D1570498126C0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f7a20a53-9f00-3a53-9e38-bc73bcdd932d.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 15290
IP address blocks: 209.146.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:c1:76:7a:4d:15:70:49:81:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=4bdfcab4-3e10-40f7-b4c5-ca9e274b7f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0f:e0:39:50:ed:7f:f9:6c:a6:72:07:ee:42:
cf:4e:b7:3f:33:08:79:25:1d:09:6c:de:7c:f3:41:
bc:c4:6d:91:4c:9c:d3:9a:90:e1:88:87:c1:06:5b:
aa:e5:e5:b3:c5:17:5f:5d:3d:25:7d:3f:6f:68:79:
79:6b:60:d6:c8:a6:79:c8:c2:82:22:3f:79:0d:90:
27:53:4d:60:ee:96:48:9b:91:b5:49:09:b8:a5:b0:
a4:e4:43:ea:65:ab:c0:1a:e1:d4:9c:53:53:27:26:
3a:5c:f6:22:23:2b:b6:ff:79:54:ff:61:e4:5a:11:
f3:be:cc:3b:ea:6b:5f:fb:81:22:f8:92:df:35:bd:
24:e9:89:30:ba:bd:91:0a:5d:31:eb:07:32:d4:78:
ea:44:87:62:86:e7:88:03:4b:9c:16:a7:7c:f9:d7:
ae:d1:41:7e:1a:9a:fb:fd:3c:61:c8:97:a1:00:5f:
98:d3:93:27:ee:5a:be:1d:cd:4a:71:c9:5c:f2:15:
dc:12:0d:46:9e:8c:12:cc:9e:64:4b:63:08:0d:57:
c9:be:d4:ff:27:e4:4d:b7:6a:8c:97:f8:10:e0:76:
f3:9f:31:54:ab:ad:31:14:a9:5c:22:e8:c7:b4:da:
6f:c7:6a:ee:75:36:11:7c:5e:a7:a1:f7:a6:4f:96:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:76:F0:D5:03:0F:21:52:5D:76:8D:BE:51:4C:8F:2A:69:F1:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f7a20a53-9f00-3a53-9e38-bc73bcdd932d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
209.146.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:d7:ed:6e:e2:2d:8d:e7:b5:2e:8f:d7:a1:a7:d8:bc:98:d8:
62:c3:50:b9:de:8d:c9:23:84:66:01:32:f9:fd:fd:11:ed:72:
5f:2e:72:c9:e9:0a:de:12:8b:23:5a:58:00:c0:4f:e7:67:d4:
57:7f:71:6d:17:93:99:c7:14:3d:7c:2b:19:30:6d:cc:1e:3c:
8d:6e:15:e4:2b:6a:89:a0:61:ae:5a:76:85:ac:d3:c4:a5:39:
b0:18:5a:63:0e:97:79:38:84:93:cd:68:c6:88:2b:ee:07:ea:
53:e7:8c:80:02:73:25:da:5a:1e:6c:be:a9:6d:52:0e:84:28:
2b:e3:6f:10:94:b7:e1:80:a8:e5:57:1b:06:8b:98:c9:f2:33:
ea:f3:ac:19:c3:7f:9a:b0:eb:1b:ba:5d:8c:af:b1:64:94:3a:
66:b3:01:ec:a6:aa:33:35:8b:dd:c2:e5:b5:50:95:26:a9:08:
25:8e:41:c4:e5:d9:57:5b:b3:07:86:f8:96:4d:77:df:70:f4:
7a:10:90:fb:fb:9c:af:0b:63:15:9f:58:33:9f:11:43:98:f7:
64:76:92:a6:24:59:42:df:77:e6:58:f9:a6:9c:ca:51:01:03:
63:7b:99:90:79:e2:f0:33:16:d4:29:54:2c:e3:18:c1:61:08:
90:4c:2c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:12:56 2025 by rpki-client