Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa
File: 476c714e-2cf9-3b0d-a179-f838724e41da.roa (raw, json)
Hash identifier: HTi4tkTC2siQBP6eYX1URZPK2tnG14/Qu82fT76gtr0=
Subject key identifier: 60:0A:C9:A3:4F:60:1D:10:34:E3:3F:CB:67:51:54:C8:8F:0A:A7:90
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F4328584897709185E85388D1AF380BC0
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 13627
IP address blocks: 209.112.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:91:85:e8:53:88:d1:af:38:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=e786678a-4e5e-43e0-96d2-a8d86556cc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:b2:1f:83:f7:2e:15:d4:b8:29:33:01:1c:
65:7b:41:b9:83:27:ec:99:5e:37:c9:0f:22:b5:2f:
89:de:7c:69:9c:b2:d8:62:1b:ff:a2:6b:d9:55:bd:
fd:c8:2b:0d:ff:a9:68:d7:4f:f9:f7:c5:54:20:c3:
c5:b4:f0:e4:c1:47:64:45:c7:9e:21:b2:4b:4d:66:
18:cc:85:ca:bf:25:64:27:bd:33:25:0c:6e:e0:6f:
80:bb:66:a8:a6:99:5a:af:c7:2d:70:d2:f6:d9:b8:
ea:04:98:34:02:c5:3f:15:90:3d:1f:c0:1e:e7:7c:
c7:6b:32:f6:d3:0b:53:23:52:00:1e:3d:bd:40:0b:
04:0d:74:05:f7:9b:21:2b:ad:b1:72:52:d9:39:d2:
af:1f:be:d2:9d:a6:b5:af:f4:6c:9c:5f:a2:e4:30:
dc:d3:78:83:4e:e5:fe:02:0c:f1:46:00:4f:f1:29:
93:e7:76:65:c6:34:22:a0:fc:e0:28:d3:63:78:4a:
51:c4:69:e7:91:7a:22:bf:f7:dd:0d:9b:4b:50:99:
9f:4a:d4:68:ed:8c:84:d8:86:2f:ca:9e:62:91:ce:
4c:a4:94:d6:f9:7e:a2:94:1c:83:a9:f8:a8:8a:5a:
a6:97:e0:0e:d5:3c:0b:23:b7:86:f6:e2:5a:65:8a:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0A:C9:A3:4F:60:1D:10:34:E3:3F:CB:67:51:54:C8:8F:0A:A7:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:2c:1a:9b:54:d0:0d:94:58:d1:02:ba:02:cf:ec:76:d1:96:
96:14:f2:b6:d6:f9:3e:27:ec:6d:45:75:05:6c:90:41:d1:3c:
cc:b7:a2:da:51:d3:be:03:f2:ea:ee:1a:29:82:ca:aa:7e:10:
38:c6:c1:03:ce:e6:ee:0f:7f:6f:f9:78:d2:74:30:d4:55:81:
0c:52:2c:1a:93:67:de:f5:3e:84:df:e3:62:49:89:8d:02:7b:
f6:b5:da:32:25:3d:c2:75:90:c0:b4:30:ce:08:88:2a:08:4a:
40:36:91:54:2e:79:6b:4a:2b:8b:c3:4e:0e:09:d4:d7:7f:e8:
1d:b5:5a:86:ac:4b:85:c5:4a:f1:e7:cb:f0:90:18:90:3d:83:
33:85:ca:f8:5d:42:37:45:b0:9b:07:3f:40:bf:09:08:26:30:
14:cb:07:05:e6:80:e5:bf:52:1d:0e:98:96:f4:22:72:7b:5e:
b2:58:6b:18:e6:93:07:a2:76:a6:4c:cc:69:7d:85:04:a9:05:
e2:87:aa:b9:5a:98:12:5b:43:cf:28:09:b1:ea:a4:dc:46:de:
2b:e3:c4:81:fb:63:0f:82:14:63:b3:ab:86:5b:c3:2f:19:cc:
ef:44:89:ec:a1:07:cb:a4:d7:3b:85:57:df:cf:52:8b:1d:ef:
fd:ab:7a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:09 2025 by rpki-client