Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa
File: 1426a637-13aa-36d7-87c8-2a889dcd7975.roa (raw, json)
Hash identifier: Lfg13CMGVRbyNiiGwLVuNnoMnWh9W49nNlqjL0zNl3A=
Subject key identifier: B1:DC:A4:8A:7E:53:22:E7:35:88:D4:B9:01:F5:64:A6:43:88:AA:AA
Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Certificate serial: 010D0C9F43285848A29B472CCDBB9419CD1C6BF4
Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 207645
IP address blocks: 209.240.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:47:2c:cd:bb:94:19:cd:1c:6b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=833920ae-69cf-4b24-a6fc-3f470fcc01b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0f:cf:2c:90:00:30:89:f5:ad:3c:bb:e9:a2:
b7:c5:14:ff:d6:9f:f3:15:d8:fa:7f:31:b8:f3:83:
57:f7:91:08:f6:57:c7:82:1a:79:25:70:e7:69:b4:
2d:94:2a:f7:4a:17:5f:5c:27:4c:b4:98:f1:f8:bd:
4d:a8:67:4c:88:a2:6a:8a:a8:27:eb:62:8e:57:d8:
f0:a4:a0:f1:7c:70:af:94:ee:1f:75:00:21:95:b0:
00:97:a9:67:e9:7a:c9:a2:f9:60:c1:ae:d4:53:65:
9b:49:38:ea:1a:ba:16:d3:04:17:0d:bd:5f:58:9f:
78:46:37:bc:b6:07:7c:59:05:72:4c:46:75:dd:48:
bd:2a:0c:65:62:b0:28:8b:6f:74:94:0e:0d:03:51:
dd:84:31:e1:d6:28:1a:28:59:fc:ad:b5:42:a3:de:
33:72:75:cd:2b:96:86:ae:3c:2b:e3:33:b7:b3:76:
eb:41:53:ea:f5:13:ad:5e:bf:09:4e:2b:3a:ef:96:
2a:76:c2:54:b4:f9:93:64:34:ee:85:92:26:ed:6b:
01:57:d5:17:69:66:1f:64:60:c6:7c:d9:85:61:92:
67:51:5a:94:78:00:c9:e3:e0:2a:87:01:d1:95:67:
a1:e6:d2:a2:e8:73:04:33:ff:82:28:8a:80:76:b6:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DC:A4:8A:7E:53:22:E7:35:88:D4:B9:01:F5:64:A6:43:88:AA:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl
X509v3 Authority Key Identifier:
keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.240.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:c6:92:84:b6:7e:8c:54:3a:18:4b:e7:d3:7a:4f:8d:57:4f:
ef:b4:25:da:51:bf:2a:03:84:0c:b7:ca:27:cf:49:5e:e2:a4:
53:04:f6:2d:04:84:de:f8:5c:b8:a7:93:58:24:70:86:9b:6c:
aa:61:6b:83:b7:44:1c:f0:c3:eb:a6:2e:db:b1:4c:74:36:74:
93:60:cf:b2:fa:03:96:9f:3f:25:60:b2:87:9d:48:4b:a9:71:
ac:24:d2:70:19:0d:8e:b0:dd:b5:b4:cb:ac:42:2c:12:ca:ca:
f2:58:6c:b5:9a:84:75:65:32:c0:59:44:77:c7:22:6e:0f:17:
e1:46:ac:d9:ac:b5:9c:9f:5b:07:7f:21:56:8c:93:4f:12:76:
95:ce:48:1d:79:4d:5d:7d:48:77:91:b5:73:05:cf:3e:b6:93:
b9:14:a6:a2:b4:37:66:a2:87:0d:a7:e8:9d:04:1f:b7:4c:9e:
e1:02:3b:b8:d7:c7:cc:2c:06:f8:2d:16:4c:a4:3b:b5:6c:e2:
81:2f:6e:f7:d3:47:8d:cf:bf:c6:06:d6:0b:55:22:7d:a9:45:
c2:6a:1e:31:f3:61:f5:3b:8c:5a:5d:8f:07:75:e0:82:b1:a2:
75:c9:af:e1:36:d9:e1:75:13:6e:33:7e:10:d9:d8:74:55:2d:
36:6a:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:05:38 2025 by rpki-client