Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: eWdFk/12gSnmf0F5ASCzeEcGlGDTh1IKUWbpj9YFTlw=
Subject key identifier: ED:B9:C5:60:74:4A:CA:96:C3:40:D2:1F:45:97:59:30:16:D4:D0:C8
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 79F324EECB9A62A29691DABEF622973AE5649B63
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9009.roa
Signing time: Wed 12 Feb 2025 00:28:26 +0000
ROA not before: Wed 12 Feb 2025 00:23:26 +0000
ROA not after: Wed 11 Feb 2026 00:28:26 +0000
asID: 9009
IP address blocks: 206.53.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f3:24:ee:cb:9a:62:a2:96:91:da:be:f6:22:97:3a:e5:64:9b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 12 00:23:26 2025 GMT
Not After : Feb 11 00:28:26 2026 GMT
Subject: CN=EDB9C560744ACA96C340D21F4597593016D4D0C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:c9:8a:70:13:57:cc:60:2e:92:b9:d9:0a:
05:a1:22:3f:be:ba:87:c2:84:8e:35:b4:cf:75:d2:
f8:8d:ee:1a:01:40:ab:99:b1:2c:7a:7a:bf:0d:a0:
f3:93:d8:3a:a8:89:1c:9f:44:4a:ae:74:70:90:17:
75:4a:a2:d2:ee:2a:8e:99:d1:fa:91:2b:67:f9:58:
05:ba:4a:f6:ea:fc:69:63:68:91:11:1a:f1:63:08:
e6:ba:61:e7:f4:b7:11:77:d3:97:75:66:14:1b:fb:
bf:fb:5d:3f:05:f3:12:61:da:a3:ae:1b:0f:7c:91:
6c:cf:c1:43:f8:63:d0:07:08:45:cc:05:c9:b6:9f:
24:3c:f0:78:93:93:1f:0d:7d:05:da:1d:bd:8b:1e:
cc:f7:6a:85:33:e4:9e:cc:c6:1a:57:6d:40:76:b6:
31:9c:20:1a:e8:29:8b:bd:f8:eb:a2:32:36:fd:2a:
cb:3a:2b:67:f7:3f:e9:d8:42:4f:dd:41:13:ad:df:
54:b4:80:be:fc:24:c8:3e:eb:e6:90:57:dc:52:7d:
49:85:2c:2e:9c:2d:b7:0c:11:e1:3e:b6:25:92:e8:
4f:32:de:cf:f8:7f:51:d5:0e:6f:73:c6:09:d4:b0:
35:ed:54:8c:42:ce:47:0c:a4:83:02:98:86:b2:31:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B9:C5:60:74:4A:CA:96:C3:40:D2:1F:45:97:59:30:16:D4:D0:C8
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.53.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4d:d7:96:7b:22:ae:9a:bc:c5:3d:90:1f:39:e4:7d:e2:3c:
71:e3:c8:f5:39:42:ae:b0:54:61:c7:cf:ea:3a:ff:2f:b6:28:
59:0d:16:b1:00:20:7c:b4:f4:2a:b4:30:9b:26:3c:52:6f:3d:
9e:73:c9:9f:42:95:b0:33:c6:ea:4f:04:0e:e9:da:76:c0:96:
35:19:b3:48:fb:00:bc:36:59:35:59:01:87:f0:5b:ab:49:79:
7c:cc:d8:cc:d1:0f:7d:af:02:96:e4:5c:c1:56:6c:54:17:cc:
ed:9a:68:4a:67:4a:ca:0a:b9:cf:00:c9:f6:61:fd:6e:c8:90:
5d:e3:20:82:fb:cd:b1:04:4a:26:c3:34:c9:66:3f:cc:28:13:
ba:9e:bd:89:56:dd:89:77:e5:6e:52:54:82:3b:5b:4c:2a:65:
b9:11:19:40:8b:a8:63:bd:76:a8:b7:f9:ca:af:ab:dc:7a:33:
50:e6:dd:37:b9:62:06:c9:c0:6b:fc:3b:4b:e1:54:50:4e:c0:
70:d7:48:69:b3:37:90:0f:a2:bb:2f:39:c4:8c:1a:c9:27:7b:
7f:56:3d:e3:1f:a8:f5:f8:4c:b9:91:11:92:01:2a:36:36:af:
10:63:57:50:c8:db:d8:d3:63:f1:1f:0e:c7:40:df:9b:b8:7d:
51:5f:ee:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:44 2025 by rpki-client