Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/6700284b-4b85-318a-8bb1-21ca06ce50e1.roa
File: 6700284b-4b85-318a-8bb1-21ca06ce50e1.roa (raw, json)
Hash identifier: Xs9Ss4bj2ryHKVLqZZEXLFXfkUTTop2aPy5emmjvnmQ=
Subject key identifier: 37:84:81:C5:5D:60:44:EA:50:DA:E5:29:9E:B2:48:72:C9:BF:B5:79
Certificate issuer: /CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa
Certificate serial: 010D0C9F4328584953C44A6136915DF6F8FBEC00
Authority key identifier: 31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/6700284b-4b85-318a-8bb1-21ca06ce50e1.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 396298
IP address blocks: 209.237.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4a:61:36:91:5d:f6:f8:fb:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=5fedbd08-f9c7-462a-bf7a-605efd5e8cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:53:14:a6:9f:8e:ac:20:f5:08:49:66:74:
b1:2e:86:6b:49:be:fa:48:ce:51:7c:e1:5b:fc:63:
1c:ff:f4:53:0d:a5:8d:84:f2:43:2e:88:53:81:ac:
12:09:e5:d6:b1:95:c4:77:c1:7a:56:ea:4f:99:e8:
d6:b4:5e:bd:4a:c0:00:1f:6d:16:02:09:d1:de:2d:
9e:9a:e9:27:d8:06:f2:62:d4:5c:02:cb:7c:d0:20:
19:2d:8b:cc:57:26:9e:13:3a:0b:24:e9:6b:14:b4:
19:28:5a:d8:e5:35:df:31:fe:aa:f3:e0:4c:36:d5:
03:f3:a9:f3:e5:78:85:04:a7:0c:28:4d:8d:a3:8d:
23:61:12:08:3d:5c:16:b8:ef:22:5f:c2:0d:77:04:
b0:6c:2f:57:7c:16:9d:44:e8:de:3d:7f:b7:55:b8:
16:16:10:a2:88:7e:58:08:08:a1:0b:49:83:57:d7:
f8:02:fc:8f:74:a9:42:e0:3e:f3:a2:43:fe:3d:2b:
ba:40:b8:a6:89:45:9f:23:02:59:38:39:2b:9d:57:
c3:5b:7e:05:32:aa:12:42:cc:5b:06:c3:40:3b:19:
a6:1e:a8:9d:3b:14:1a:0d:02:dd:82:66:f0:04:61:
2d:a5:be:2f:75:64:67:db:d0:32:d0:1a:62:2b:9c:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:84:81:C5:5D:60:44:EA:50:DA:E5:29:9E:B2:48:72:C9:BF:B5:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/6700284b-4b85-318a-8bb1-21ca06ce50e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl
X509v3 Authority Key Identifier:
keyid:31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:cf:55:73:15:6a:0e:60:ca:f2:c1:11:e1:d4:a0:83:97:64:
fe:90:8a:4f:cf:53:0f:e2:a3:dd:a4:26:71:00:83:97:f7:a6:
08:72:25:32:27:ec:1e:2f:b9:be:b0:4e:ad:c8:e0:3c:6a:5e:
f9:8d:13:73:46:d7:ea:91:c4:0d:b9:bc:f1:6b:aa:33:88:aa:
30:99:00:0b:a2:64:b7:46:85:da:ab:47:27:84:68:f5:2f:6f:
d6:51:03:3b:6e:7f:d2:36:5b:88:9f:69:64:b3:da:ca:24:8f:
18:98:e1:06:15:d9:68:a9:fe:79:20:90:89:89:74:ce:3a:a5:
e7:45:95:9f:30:f2:0d:9b:6c:d9:1b:3d:f0:d8:87:d2:3c:68:
05:9b:2d:73:38:a5:93:42:c5:de:55:18:84:f5:07:2d:80:06:
87:d8:7c:33:22:ef:d1:49:cf:5e:37:60:b1:ed:e5:79:ae:c3:
57:44:e9:21:b5:c7:1a:3b:21:6f:79:bf:6a:4e:a6:66:d9:39:
8e:ec:9b:2e:90:a8:0c:be:56:7d:f2:8f:9a:53:8a:89:62:7c:
d4:fe:47:35:d5:34:e6:04:f7:66:50:86:21:e9:9f:7f:fe:87:
e2:ca:9c:e9:03:f8:b3:94:e1:32:f4:e4:4f:fe:af:dd:46:77:
a2:59:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:44 2025 by rpki-client