Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/0ef23001-7474-3b1e-8a61-c2efaf0689d1.roa
File: 0ef23001-7474-3b1e-8a61-c2efaf0689d1.roa (raw, json)
Hash identifier: gqZEj0WaBLGsXNWGfHKUo7SZ3eDUO891RQclirpU4C4=
Subject key identifier: F2:7B:EF:CB:B4:6B:2E:58:88:51:E9:A7:49:39:C3:4C:B9:FB:78:1C
Certificate issuer: /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial: 010D0C9F43285848F22C6E0414C6E6545D214F00
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/0ef23001-7474-3b1e-8a61-c2efaf0689d1.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 7794
IP address blocks: 209.35.208.0/20 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:6e:04:14:c6:e6:54:5d:21:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=e2bc807b-e52e-48ad-8dc8-35ed10242863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:a0:39:bf:86:69:89:f9:ba:be:6f:ad:14:
d4:3d:15:e6:1c:03:af:bb:38:3e:8f:51:fd:2c:31:
19:aa:bf:25:19:e2:d4:93:22:38:41:96:0e:d6:3a:
11:23:d9:33:df:74:80:2a:46:c0:59:57:bf:dc:6d:
85:65:90:33:34:0f:a9:14:51:e1:bf:e1:1c:c7:dd:
04:4b:a2:31:63:c7:69:6b:fd:75:f0:36:9d:04:9b:
e8:b1:c0:17:4d:5d:3d:63:05:2d:90:c8:57:8e:50:
9b:12:6d:bf:8a:f2:0c:b1:a5:3c:bc:8c:be:9d:20:
f0:69:dc:56:a9:07:79:3d:dd:dc:95:90:38:58:4c:
9b:eb:d4:76:44:5e:eb:44:f7:a8:f9:07:25:7f:7c:
89:74:ca:38:81:80:f0:25:0a:51:98:c5:53:26:94:
e6:f0:a2:c8:1c:fc:85:e3:69:8e:4d:79:19:b5:b9:
9b:4b:e6:1f:36:84:f0:e4:d9:2e:6a:84:49:07:9b:
95:16:4f:c7:fe:c1:75:6d:b3:17:44:29:58:8e:d2:
54:61:7b:36:85:eb:95:03:2d:7a:ad:69:51:c3:cf:
ff:7e:2f:a3:82:7d:69:9a:15:3b:7f:63:7b:a0:b1:
76:a6:44:19:0c:21:a7:51:20:0a:4c:59:71:b3:24:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7B:EF:CB:B4:6B:2E:58:88:51:E9:A7:49:39:C3:4C:B9:FB:78:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/0ef23001-7474-3b1e-8a61-c2efaf0689d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
X509v3 Authority Key Identifier:
keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.35.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:46:ae:e1:03:94:7c:67:aa:5d:93:20:e1:36:fc:19:da:de:
f6:b9:ca:1f:e9:06:5e:6f:55:44:ee:2a:c5:af:36:da:28:96:
19:5e:0d:b1:ab:12:75:07:4b:22:61:5d:a4:6d:a8:b1:89:5c:
89:0d:13:1e:e7:4f:d1:8e:82:62:3c:24:d2:38:8f:4c:94:aa:
65:ab:6b:6b:54:b0:ad:a2:f9:ac:ed:be:54:b8:9c:a7:cd:de:
f7:cf:69:d2:db:00:f7:2c:12:57:4a:70:d1:cc:1b:ca:16:5b:
26:d0:98:d4:74:f5:6e:66:31:5b:cd:d6:23:b6:40:d6:83:7a:
53:a4:2f:9f:ff:af:c5:da:3e:9f:fe:a7:e2:8f:03:83:7b:37:
76:40:64:82:73:a4:43:5e:fa:8b:3d:01:99:98:c7:e4:3f:c1:
ab:83:c8:d5:26:d7:4a:53:2b:56:8f:76:73:ac:4f:bd:ef:68:
4a:64:89:2e:66:62:15:e3:24:d8:d6:91:31:80:1a:a3:a4:07:
f1:31:38:4c:94:1e:7f:a3:48:b1:41:20:dc:34:0a:14:5d:dc:
cf:0d:75:58:1d:8d:a0:9e:9e:70:24:df:7d:14:c0:d6:54:87:
4e:76:74:f5:9b:b8:3b:b0:7a:f5:32:eb:c5:f6:97:41:8a:e4:
5c:30:51:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:32 2025 by rpki-client