Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/573015d3-f77a-3d2a-ad89-1d005cddd49f.roa
File: 573015d3-f77a-3d2a-ad89-1d005cddd49f.roa (raw, json)
Hash identifier: Cj7JmswqzDlmQzhDNASf0VniuTDK83d3NzRNJBRXTDM=
Subject key identifier: 24:E5:60:E2:5F:7E:6A:FD:BD:EB:45:19:52:BC:7A:BC:91:5E:5C:E5
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858491246E2A25AAD0926FB438200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/573015d3-f77a-3d2a-ad89-1d005cddd49f.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 397220
IP address blocks: 209.173.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:e2:a2:5a:ad:09:26:fb:43:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=d5fee8c8-f1d8-4618-ad38-fdece75f5329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:31:a3:a2:53:ed:2a:b2:ce:d9:0c:36:ee:
ea:e4:5e:67:c2:8a:9b:14:84:42:fb:bc:a3:d4:07:
14:71:8c:c2:eb:ad:b1:d0:3b:ea:f6:a9:25:fe:98:
e4:83:f6:af:60:57:08:24:98:05:8e:08:30:6a:47:
99:88:5e:fa:0f:ce:ec:46:66:7d:1d:71:09:b9:02:
b0:53:71:a9:67:07:97:64:be:6d:d0:19:92:80:33:
13:d8:b4:68:e0:ba:9f:63:fc:a3:a7:40:ce:38:91:
cf:5a:d0:b7:25:d4:04:04:c7:d1:d7:3c:5d:7f:ee:
0b:02:5e:23:80:11:8c:a2:74:60:cd:36:5b:e5:37:
05:ea:d9:dd:6f:a1:06:d2:f1:9d:1f:4f:d3:c7:b3:
6c:9f:53:ba:af:ce:67:44:f2:92:dd:a6:38:bb:7d:
a6:4b:ea:b7:80:76:42:d4:be:7e:bd:ea:4d:e5:0f:
de:2f:c4:87:fe:e7:19:90:36:e8:17:70:ad:3f:4c:
24:dc:5c:13:e3:08:6e:4f:62:26:c3:05:f2:45:2b:
73:50:e4:a8:29:a5:57:16:a3:ab:bd:1b:c9:c7:2b:
a7:48:98:20:2f:37:29:92:21:15:e5:c8:0b:f4:2f:
1c:b3:75:86:c9:fc:1f:f4:e6:11:30:8a:db:57:e7:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E5:60:E2:5F:7E:6A:FD:BD:EB:45:19:52:BC:7A:BC:91:5E:5C:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/573015d3-f77a-3d2a-ad89-1d005cddd49f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
209.173.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:b5:ff:c8:56:f7:65:c7:35:3f:19:83:08:e8:8b:1f:59:b9:
fd:b0:a6:d3:9c:d8:6c:ea:46:19:8f:c7:2a:55:dd:fe:f5:7c:
5f:50:60:8e:82:00:19:b6:d3:6b:a7:c1:69:fe:18:49:58:86:
47:db:79:20:75:2f:c3:22:45:a5:b7:47:4a:82:99:e9:c8:20:
39:4d:1b:f7:f6:8c:3d:41:58:4c:62:81:34:91:4f:42:32:b1:
00:8c:2c:13:30:c3:7a:c3:45:f7:42:94:62:60:d9:99:1f:80:
af:57:99:27:f5:42:cb:f5:a1:c5:c2:86:c0:e9:ec:48:d6:a9:
e3:9d:56:ad:95:75:d7:50:04:85:9a:50:16:99:d4:c2:36:3c:
5e:bd:56:19:86:44:4b:a0:59:b7:bb:a3:6a:74:cc:16:db:34:
81:fb:00:8d:5e:42:c4:93:82:c9:ec:f6:d9:23:27:03:9a:e2:
50:67:bd:a0:2f:67:06:d4:9e:c1:93:59:3d:8d:05:99:66:99:
91:83:a5:6a:a6:b0:a2:d6:b3:c2:e4:ce:b9:3c:59:ec:7d:38:
46:bf:8d:19:36:67:b2:0c:44:a4:f4:09:10:79:39:a8:05:35:
9b:bb:75:f1:85:0b:75:2c:fb:e9:0f:5b:38:c1:05:21:df:9c:
ac:6b:04:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:40 2025 by rpki-client