Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/74295fbe-6636-37e1-8ba4-1835f48000f7.roa
File: 74295fbe-6636-37e1-8ba4-1835f48000f7.roa (raw, json)
Hash identifier: FhfyW7ZR2d2AA5FpBEZPJJTGtCSDYbGjoS9bmL/Dmqs=
Subject key identifier: BD:85:B2:96:C7:9C:01:DF:44:40:44:F7:68:8E:EF:41:7D:BF:B9:4C
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F432858488DAB44C6CC5DD5C8529944C0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/74295fbe-6636-37e1-8ba4-1835f48000f7.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 4760
IP address blocks: 209.9.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:44:c6:cc:5d:d5:c8:52:99:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=635c1e85-4b25-4a8a-89bb-5bf20dfbe7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:df:24:7c:4a:06:25:a1:0c:df:e4:0c:f8:
a2:ac:4b:32:bc:66:e6:f1:3d:9b:ed:98:f2:c0:7d:
db:47:fe:98:d6:50:d6:7a:4b:a9:e1:9d:21:27:1f:
75:f8:ac:10:aa:fe:d1:14:61:0d:6e:3a:db:fc:c2:
3d:19:3e:a1:a2:97:34:e4:d0:9c:a5:cb:86:86:df:
de:d2:72:6b:7a:a6:29:77:71:03:c7:1e:84:1b:38:
ea:ad:68:cc:6d:97:76:92:76:be:d1:a0:9a:d9:1c:
93:d3:93:cb:d0:e6:66:59:e5:42:ed:22:76:d5:55:
ca:d3:e1:78:d6:f2:3a:6c:80:d7:50:a4:70:0a:11:
d7:28:4d:df:6b:b1:35:db:b5:60:1a:9b:75:55:4e:
33:4f:b0:39:67:06:e9:20:1f:6e:e9:03:15:7a:20:
41:01:47:0a:c9:2a:fa:02:0a:85:ee:62:b8:0f:6d:
07:4d:53:7e:a6:bd:a0:61:24:b3:c3:6a:f7:54:c6:
f2:09:a5:68:07:7b:67:07:82:94:04:7c:21:11:40:
a5:2f:f2:25:7a:8f:bf:bc:97:1f:da:53:cc:69:f1:
8e:ea:8c:48:31:05:be:26:b4:4b:a5:6a:ff:71:05:
96:78:ef:3b:34:ce:92:1f:cd:02:c9:35:08:50:33:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:85:B2:96:C7:9C:01:DF:44:40:44:F7:68:8E:EF:41:7D:BF:B9:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/74295fbe-6636-37e1-8ba4-1835f48000f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:ea:ff:00:63:0f:79:39:3f:8d:c4:a9:e3:aa:3e:c7:ea:c9:
c1:3d:4d:69:c1:7b:14:d4:e9:ba:ca:f3:3c:e8:bd:2b:d2:13:
3b:77:c4:d5:8b:5c:8e:7f:62:b7:24:45:d6:f8:12:da:77:a4:
22:92:de:50:f2:a9:7a:42:85:76:22:21:e1:05:79:7c:b2:3f:
e4:7a:72:48:65:2c:97:3d:a5:7c:13:17:1e:61:cb:26:68:92:
17:53:90:5c:5f:0d:7d:ee:f8:23:be:f6:c8:2a:81:4a:f2:5b:
c0:24:2a:b9:8d:1e:fe:e1:c9:9e:a1:02:51:08:b3:16:f7:d3:
a6:35:6c:cb:9a:11:35:17:2f:c2:a0:6f:b2:2e:79:ef:4d:ac:
dc:06:e2:8d:ea:fb:c8:a4:f1:a8:ae:c2:57:6a:bd:c5:bd:6f:
ed:ea:58:f6:32:5e:48:fc:4d:7a:92:1a:fe:13:a2:d3:20:73:
60:87:79:89:47:f6:96:37:45:ed:ef:ea:39:e0:9c:e0:49:95:
56:4e:77:0b:5f:50:91:40:08:9e:c9:e0:ac:de:f9:16:79:f0:
45:60:fa:26:dd:bf:28:bb:31:93:84:23:fb:67:db:36:87:0b:
42:a0:70:cf:73:ae:7f:26:fa:1e:1f:cc:30:19:97:09:d2:66:
51:d4:c9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:46 2025 by rpki-client