Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b764023-240e-4aca-bba2-b6a6a526e200/b2778fcd-ea8c-3060-8ba1-d444c4ab7580.roa
File: b2778fcd-ea8c-3060-8ba1-d444c4ab7580.roa (raw, json)
Hash identifier: V1zk4b83++6jwTmTUP344yWaqQdPoue/6X3Px0a3jlk=
Subject key identifier: 1E:C7:F2:CE:C0:32:5B:14:FF:A2:3C:68:FA:77:28:3B:A9:33:D7:79
Certificate issuer: /CN=5b764023-240e-4aca-bba2-b6a6a526e200
Certificate serial: 010D0C9F43285848FD56ADAE32205D3E2ACD5180
Authority key identifier: 80:38:17:CF:6E:82:92:18:26:85:64:27:26:16:CE:88:B3:AF:65:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b764023-240e-4aca-bba2-b6a6a526e200.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b764023-240e-4aca-bba2-b6a6a526e200/b2778fcd-ea8c-3060-8ba1-d444c4ab7580.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 14901
IP address blocks: 209.188.112.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:ad:ae:32:20:5d:3e:2a:cd:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b764023-240e-4aca-bba2-b6a6a526e200
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=aeb6105f-0ac3-4034-984d-c1f69588c4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:28:1b:62:c3:15:59:d6:91:e5:05:dd:2b:
fb:9b:32:ee:69:73:e1:8d:71:d4:de:99:7e:e3:08:
7d:e0:5b:50:b4:26:90:6c:f9:56:41:81:7c:80:13:
0c:9c:2c:22:10:29:b9:39:0c:2f:70:89:6f:9f:17:
d1:49:d5:b1:eb:0c:55:4c:b8:5b:01:3f:de:92:c0:
ae:29:df:cc:af:da:56:b5:a8:f6:a8:82:22:da:68:
5f:0b:c7:7b:12:1c:2e:ba:03:4c:60:db:f5:72:91:
ea:d7:cc:99:8a:9d:13:51:97:6e:af:98:22:64:73:
ad:4c:d5:80:fd:c7:6d:19:e5:d8:f9:ad:20:ab:d7:
98:8c:27:cd:bb:d2:a3:04:b9:3b:15:21:5d:38:cb:
c6:54:84:e2:ca:a2:b5:b6:44:91:68:4f:3c:13:cb:
3d:07:4a:27:25:49:e7:81:5b:3f:5b:7a:e7:93:51:
dc:f0:38:a5:59:b7:23:a2:d6:98:59:cb:88:0a:c7:
17:97:bf:ff:bc:76:aa:37:12:0f:88:7a:57:80:58:
93:64:38:4d:92:99:60:11:53:59:27:07:f0:c6:48:
51:d5:a3:5c:cd:b8:d6:b1:7e:a0:d1:59:4d:3c:f4:
c7:40:bf:f1:15:d3:b3:5c:c7:05:77:92:2d:e8:28:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C7:F2:CE:C0:32:5B:14:FF:A2:3C:68:FA:77:28:3B:A9:33:D7:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b764023-240e-4aca-bba2-b6a6a526e200/b2778fcd-ea8c-3060-8ba1-d444c4ab7580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b764023-240e-4aca-bba2-b6a6a526e200/5b764023-240e-4aca-bba2-b6a6a526e200.crl
X509v3 Authority Key Identifier:
keyid:80:38:17:CF:6E:82:92:18:26:85:64:27:26:16:CE:88:B3:AF:65:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b764023-240e-4aca-bba2-b6a6a526e200.cer
sbgp-ipAddrBlock: critical
IPv4:
209.188.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:f5:cd:ce:cc:74:8c:7a:e6:55:6c:39:ec:e5:1d:38:46:1b:
80:9d:b1:0f:ca:7f:da:c8:36:17:67:0f:cd:77:5d:83:9f:cd:
e9:a6:24:3f:42:64:c4:ef:4a:d6:9f:12:4b:d9:09:67:a2:25:
fa:e1:e4:d3:cf:e8:fb:8c:81:01:6b:9d:4f:54:c3:0e:f9:04:
7e:1a:b8:6b:00:93:21:19:f0:b0:85:cf:cf:18:7b:f1:97:12:
4e:dc:18:78:57:05:8d:67:2d:0e:2b:78:bf:4e:f3:69:dc:67:
15:68:b2:e1:bf:a7:90:d7:44:a4:54:01:15:65:62:cc:7f:a6:
c9:d0:5f:06:92:47:70:b0:01:cf:a0:c7:c2:7e:a5:06:ea:ab:
ab:80:36:e9:c9:2e:9c:d4:32:55:9d:5e:b1:e8:ec:35:8d:b1:
9f:17:ad:b3:0d:38:75:a0:15:57:e1:c9:a9:5d:fc:51:b7:56:
bf:dc:95:b8:44:f3:0a:c0:66:2e:52:dc:dc:92:9f:44:65:0d:
af:74:a0:69:89:1e:6f:da:60:0a:4f:cf:2c:bb:cf:9a:23:46:
12:69:2e:80:c1:fd:94:e8:c8:37:d6:5d:cb:cb:d3:31:67:4f:
15:ad:cf:1e:68:64:a5:5f:9f:08:65:ba:90:bf:99:5a:ce:9a:
a3:53:d1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:34 2025 by rpki-client