Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/96ae9a88-19d1-3ddd-8c33-398a8aa2faca.roa
File: 96ae9a88-19d1-3ddd-8c33-398a8aa2faca.roa (raw, json)
Hash identifier: Mzo586U0JqPyeRYGX3zAp0PbAaIzrDa0GThrNKaMHz0=
Subject key identifier: 1B:1E:58:49:D2:98:58:6D:2A:E4:85:1D:23:C9:BA:78:24:EC:C1:CE
Certificate issuer: /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial: 010D0C9F432858492CCF9A542D7920055B21E780
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/96ae9a88-19d1-3ddd-8c33-398a8aa2faca.roa
Signing time: Thu 13 Mar 2025 14:07:41 +0000
ROA not before: Thu 13 Mar 2025 14:07:41 +0000
ROA not after: Wed 11 Jun 2025 14:07:41 +0000
asID: 22351
IP address blocks: 209.159.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:cf:9a:54:2d:79:20:05:5b:21:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Validity
Not Before: Mar 13 14:07:41 2025 GMT
Not After : Jun 11 14:07:41 2025 GMT
Subject: CN=da68f986-42cb-4d7d-9937-63c2c4adfbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:91:b0:b6:38:d1:3e:40:e7:e4:16:43:c4:d0:
98:6a:eb:ff:f2:90:9d:ff:6b:d9:0d:7e:84:48:ad:
b1:5d:5b:e9:de:fe:21:31:34:db:46:ae:ab:48:a2:
93:cf:18:16:b2:7f:52:bb:84:3b:c6:f8:7e:2b:d9:
7e:a1:1f:0b:6c:52:6e:b7:a0:53:9e:14:35:3d:ca:
b7:15:24:41:72:16:84:70:52:b1:af:4c:5a:0b:8f:
ba:90:41:c8:05:5d:29:ff:d5:e7:e4:bc:3a:99:c0:
07:5c:b6:88:1c:45:c6:72:34:01:be:87:10:72:d0:
28:33:b0:01:da:72:b9:37:b1:cd:90:1f:f7:e4:18:
28:7d:f5:a2:22:16:4e:cf:17:f1:ff:07:31:57:01:
10:5f:f5:6b:10:70:2a:9c:2d:3b:2b:a7:cc:43:f4:
24:bd:3d:bc:92:db:2e:36:aa:32:3f:45:58:fa:c2:
db:db:2e:29:10:16:8f:87:23:18:5c:bc:aa:14:76:
f5:84:1b:29:d6:b1:e2:7b:2c:a3:2a:ba:47:a0:3b:
58:69:3f:d0:39:d9:0a:70:49:44:fc:fe:7c:43:80:
d3:ff:bd:4d:8f:b0:6f:b6:48:b6:67:85:dd:0d:a2:
d5:69:77:fa:68:02:10:50:5b:68:74:8b:6b:34:74:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1E:58:49:D2:98:58:6D:2A:E4:85:1D:23:C9:BA:78:24:EC:C1:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/96ae9a88-19d1-3ddd-8c33-398a8aa2faca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
X509v3 Authority Key Identifier:
keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.159.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:77:7d:ae:2c:f4:85:fa:d1:1b:21:b4:18:25:b8:42:ee:12:
03:9d:57:69:e0:ce:f4:af:95:3a:e9:70:40:35:f8:78:48:b0:
9b:cc:7f:79:47:39:cb:66:d4:08:a9:1c:5e:dd:b4:93:cd:ea:
53:6e:03:d8:c9:0c:7b:ce:da:f7:52:32:08:e8:f0:65:5d:79:
77:08:c5:54:df:f9:53:b6:85:44:44:59:45:8f:c4:92:e9:83:
48:d5:1c:8d:ad:2c:95:4f:55:a6:7b:32:41:8d:fb:92:f7:82:
19:f6:06:a4:fc:6b:67:63:fd:23:f3:e5:e7:bc:11:55:3d:56:
de:88:b9:e2:f4:e5:84:c5:52:8d:0b:95:d9:6d:c2:b0:9d:6e:
b2:d6:79:d6:c6:49:86:9d:b9:8d:f4:e6:22:d6:ab:20:9f:d0:
e4:ea:0e:d0:dd:39:de:15:e5:df:38:1f:7b:13:1f:7b:b4:8b:
99:0c:e1:82:4a:bb:5b:56:37:7a:07:da:27:81:19:1d:87:ed:
83:d5:8b:42:01:7c:ab:b9:f3:ea:5e:33:81:f6:43:f5:3b:c9:
41:be:72:9f:ac:6e:a1:a9:b1:d5:ec:53:da:af:eb:dc:dc:10:
c9:df:35:ae:88:10:6d:80:fb:01:4c:67:43:64:d2:38:0c:e0:
7c:3f:d1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:22:22 2025 by rpki-client