Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa
File: c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa (raw, json)
Hash identifier: QMm0Z5fuwx5e+y02VVtnftPePLCbG7M19DajpikwDdU=
Subject key identifier: DB:CF:21:7F:A6:5D:EA:D3:40:E9:3D:7A:A5:1D:9C:9F:47:C6:C2:79
Certificate issuer: /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial: 010D0C9F43285848E2C1B61C701666AC1BFFF600
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa
Signing time: Sat 15 Feb 2025 01:29:53 +0000
ROA not before: Sat 15 Feb 2025 01:29:53 +0000
ROA not after: Fri 16 May 2025 00:29:53 +0000
asID: 16509
IP address blocks: 69.52.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:c1:b6:1c:70:16:66:ac:1b:ff:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Validity
Not Before: Feb 15 01:29:53 2025 GMT
Not After : May 16 00:29:53 2025 GMT
Subject: CN=87f0125a-62c0-436f-94cf-7c508fb09aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b6:6d:fe:6b:69:ea:46:b7:e4:a4:fa:ee:5a:
19:a5:19:40:c9:6b:7d:5b:5c:56:8d:da:79:6d:e4:
a8:9b:31:67:8c:93:24:a6:b3:5b:d5:eb:d3:0d:54:
94:79:e6:0f:3c:39:28:fc:41:69:41:da:10:b0:53:
24:84:59:2d:40:6b:c4:5c:de:8c:d7:d8:aa:e6:fe:
02:d0:27:ab:b5:13:27:b1:37:cc:c4:e7:64:18:60:
11:2a:34:0c:e1:91:8f:30:52:df:f8:56:b9:0d:5f:
1a:b1:d9:df:bb:19:dc:0e:dc:2a:fa:b0:e0:1b:40:
8b:fb:76:14:15:41:4d:99:40:87:0f:e4:1a:60:e5:
f7:ab:12:8b:2b:4b:b2:ec:28:cf:cc:b5:49:5b:0a:
c2:96:44:9a:d7:d4:e3:aa:51:43:b4:4d:b0:d7:07:
2a:de:10:50:d2:9d:16:d8:a1:b3:45:45:ae:68:9b:
11:d2:96:b4:64:bc:2b:4e:b9:54:24:c4:bf:8e:34:
32:ce:de:6c:ac:95:f1:99:e3:fb:c1:bf:30:74:b9:
54:d2:85:c7:ec:2b:47:02:cc:c5:ee:9e:5e:b1:54:
b7:e7:26:c6:5c:16:ac:04:75:10:3a:5f:4a:64:d8:
6a:74:35:da:23:da:28:77:ff:95:70:d7:e4:8c:e8:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CF:21:7F:A6:5D:EA:D3:40:E9:3D:7A:A5:1D:9C:9F:47:C6:C2:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
X509v3 Authority Key Identifier:
keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
sbgp-ipAddrBlock: critical
IPv4:
69.52.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:3b:8e:0f:4f:40:a8:f7:ea:3c:d1:3b:28:d6:4e:c3:1b:6d:
a9:d3:0f:86:61:08:65:71:dc:22:e6:e5:c9:55:8a:47:08:0f:
95:11:b9:a0:32:b5:11:2d:51:8d:3c:11:53:ca:a7:ec:16:0d:
33:ee:54:43:aa:c2:77:3c:11:cf:fb:25:0f:91:e6:c4:99:9a:
c1:e7:30:e7:3e:bb:c8:74:f1:25:26:95:06:8f:cf:1b:4e:e7:
3d:ea:2b:fd:aa:78:90:d0:a1:0c:0e:a0:91:59:dd:e3:21:49:
ec:2d:b0:ac:ad:86:fa:76:48:38:ad:8f:c2:33:2a:bf:58:53:
38:cd:b7:30:fc:8a:d8:ef:1f:7b:66:83:ed:c4:ff:0d:c9:69:
5f:c5:62:93:b2:bc:80:5f:ae:ec:db:56:55:35:df:e9:a0:6e:
36:cf:8a:b1:8a:ec:de:d9:60:ad:e7:9f:d9:2c:3c:a4:42:03:
e1:12:ac:fd:6f:cb:f3:91:79:c7:83:3b:be:12:98:b4:e2:76:
d2:ba:4b:ed:5f:65:02:f9:6a:fa:b1:7c:b9:5d:22:4c:94:23:
b3:35:16:ef:3d:45:b2:a0:c6:bc:dd:15:7e:cb:81:ae:20:38:
16:be:76:81:a6:44:c6:7a:db:17:e4:db:f0:89:1e:00:58:3d:
38:d1:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:17:51 2025 by rpki-client