Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/9d506a79-6de4-3c1a-b512-7280aa510ed1.roa
File: 9d506a79-6de4-3c1a-b512-7280aa510ed1.roa (raw, json)
Hash identifier: BB3itdWuN3Tb203MlOV6eMc6jTAMlKObgsOM6tVMj8Y=
Subject key identifier: 75:21:FD:BD:88:90:84:2D:95:7B:6E:EF:E4:90:5C:26:4F:C6:A0:3D
Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial: 010D0C9F43285848EC96A53356D5A7C6B1693A00
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/9d506a79-6de4-3c1a-b512-7280aa510ed1.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 209.169.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:a5:33:56:d5:a7:c6:b1:69:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=44925cad-8e33-4185-8d31-12b6e059aa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:50:dc:1f:18:2a:9d:82:21:3b:0c:1a:02:
4e:31:b2:f3:f5:0b:03:6c:4a:64:d6:8c:03:cb:95:
d3:11:7a:be:0c:c5:d7:92:0d:55:a7:d8:88:ae:77:
71:fc:d6:ef:82:47:95:26:05:1f:a8:9a:ce:c8:92:
5e:cb:6b:91:17:90:7a:a4:1a:aa:2a:80:11:37:5d:
18:35:b4:c3:f2:e5:a6:14:aa:51:79:22:aa:fe:fc:
e7:67:af:52:29:89:f3:7b:e4:9a:6b:23:8a:cd:f9:
5d:87:c6:d9:c2:da:8d:c4:bf:6c:11:c6:66:c2:8d:
50:0c:4c:77:90:5c:cc:62:e5:b6:a6:89:b7:7a:2c:
20:41:1b:69:b6:5d:30:6b:7b:b7:31:98:d1:a0:83:
7e:02:6c:82:51:26:5b:54:6e:d7:82:3b:aa:12:4a:
e9:79:c4:ef:a6:bd:cb:88:63:81:71:b7:63:d3:69:
b4:5e:4d:ea:12:36:e7:77:2d:61:40:d1:0a:bf:ac:
ee:2f:93:ca:10:b3:08:44:de:97:99:64:7e:4a:99:
72:07:02:f6:ec:c0:a8:7a:75:37:9d:84:4a:8b:27:
9d:4b:55:04:fa:fc:b6:2d:cd:03:aa:4d:2c:11:6c:
6e:38:a2:2e:b7:09:35:42:6a:52:c7:4f:ab:b9:25:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:21:FD:BD:88:90:84:2D:95:7B:6E:EF:E4:90:5C:26:4F:C6:A0:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/9d506a79-6de4-3c1a-b512-7280aa510ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
X509v3 Authority Key Identifier:
keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.169.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:5e:1b:ee:ba:d3:ff:a6:9b:76:7f:21:36:e3:70:a5:ad:fa:
d7:31:b8:28:49:85:e2:b4:db:2d:72:42:9f:fe:3f:ac:63:d6:
7c:55:89:c1:a4:5a:c1:48:e5:d6:0f:7f:d1:af:e3:d4:02:9a:
e8:d8:07:bb:b1:97:19:55:10:ef:41:d1:7c:6a:00:21:4d:6e:
76:40:b0:b2:3b:f7:02:39:7e:16:7c:30:ef:c7:b0:89:23:e3:
46:c6:fc:41:33:9c:33:45:de:ef:fc:a4:92:c4:21:3e:fa:93:
79:e8:72:a2:ef:8b:38:41:4e:24:8a:68:47:15:46:53:11:de:
f4:a2:0e:f5:9e:05:61:c3:26:f8:10:26:53:fa:2d:bf:7c:72:
a4:b1:16:d9:c1:70:77:38:33:0f:2f:1d:a7:0e:69:91:2b:f0:
15:5f:80:6a:f1:75:40:57:10:6a:55:a0:45:2f:54:6c:ff:68:
c2:8d:c6:f8:1b:bd:66:91:72:cb:29:4d:da:67:36:61:d4:bb:
6b:b1:5f:4c:98:1b:2f:9f:72:e1:81:ca:cc:a8:b7:4b:47:3b:
e1:99:f5:82:71:bb:70:9b:4e:31:63:17:e9:d9:b6:72:5c:33:
3c:85:2b:dc:98:ec:ed:c0:4d:56:ad:fc:e0:bd:cc:5d:48:b2:
24:5b:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:42 2025 by rpki-client