Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa
File: 0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa (raw, json)
Hash identifier: of01WEFNIKO+bU4NcgJaTaivJH7m9McgM+YIpXikJr8=
Subject key identifier: D5:67:38:3F:62:B1:11:7F:66:6E:B8:64:39:48:D9:B9:81:1C:04:E6
Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial: 010D0C9F432858491ED6E97420F45BAE8BC8B200
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 209.169.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:e9:74:20:f4:5b:ae:8b:c8:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=1d3ecf74-e81c-4f19-973d-2259f0702dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:bb:ec:12:a5:e2:8c:c3:99:ae:67:ae:1a:
45:7d:3f:79:5b:10:33:6d:d5:1c:0e:51:c9:ac:78:
33:d4:14:61:46:6a:5f:0d:bb:3b:2e:c8:26:1e:71:
79:ac:25:7d:1d:2c:6a:1b:29:f3:9a:3a:f2:ef:f0:
1a:18:39:7f:4b:65:0d:d7:87:07:30:ee:74:1d:51:
b7:3d:3b:e3:04:cd:9d:fe:7a:5a:a5:b7:5a:5d:db:
80:b4:71:45:06:93:1d:fd:4f:13:b5:29:0b:0c:26:
94:ba:4b:f7:a3:c2:bd:7b:d9:ef:ba:9a:21:f0:91:
75:fc:f0:31:da:46:d2:fb:0c:70:14:81:32:9e:10:
36:72:71:1e:1e:1c:70:32:56:de:f1:72:9d:fd:99:
92:ec:ca:5e:6c:b8:bc:b8:34:38:ec:a4:82:4a:34:
eb:7a:98:8b:7a:cd:c3:e1:98:7a:a8:40:8e:36:57:
3e:a0:51:ce:6d:0c:5a:62:80:82:f1:6e:c5:d6:ec:
21:21:9d:72:47:b3:30:0e:40:2f:ad:68:35:8a:d9:
9a:a0:03:37:1e:9a:f2:82:9a:e4:a1:33:3d:d1:3c:
bd:8b:f3:92:1f:ce:72:2a:65:82:6a:1e:cc:95:70:
ac:b5:f5:d9:b2:4d:13:7d:a7:36:8e:ba:f4:de:f0:
52:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:67:38:3F:62:B1:11:7F:66:6E:B8:64:39:48:D9:B9:81:1C:04:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
X509v3 Authority Key Identifier:
keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.169.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:b3:15:b4:54:73:6b:ca:da:ad:c9:64:b5:ab:bc:12:b9:bb:
39:64:78:63:1b:7d:3d:2e:29:a9:49:3e:2d:cd:59:2b:54:2d:
89:81:59:ff:21:23:29:7d:3e:8b:05:dd:e7:d2:65:db:38:54:
d8:88:e7:22:7f:d8:b2:d5:cc:74:64:f7:94:44:ce:81:90:65:
f8:33:de:f5:bf:e4:84:fa:fd:5d:07:f9:d5:50:b1:5a:ac:1c:
04:8b:99:11:2a:2c:a2:37:ba:d4:66:df:65:d5:d8:fd:0b:67:
cc:6c:3d:c9:a4:0e:72:d1:2e:b1:97:6d:7f:db:97:eb:5f:71:
9c:6e:ac:d8:e7:c0:76:49:d7:80:4f:a4:11:8b:45:e4:e6:a0:
b1:14:7e:e3:35:be:8c:6e:c1:f6:a8:99:0b:37:5f:03:e6:25:
6c:0f:8b:05:59:89:ed:80:25:18:15:79:f7:01:17:07:d8:b0:
7c:df:e9:ba:52:41:bb:6f:e4:97:f4:43:da:d4:5f:0c:fc:58:
97:68:c6:36:f5:0f:72:8a:ee:84:74:c5:74:04:9e:36:e5:1d:
32:a1:f5:52:09:ff:0e:d2:d0:44:89:1f:d2:27:09:a5:1d:90:
69:ac:40:a3:89:a6:98:8f:f0:c6:cf:a2:a0:de:b6:a0:fd:c2:
2a:d5:ad:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:17 2025 by rpki-client