Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa
File: a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa (raw, json)
Hash identifier: QFJ2pVXktPRTrA/vB9EUjZf2xWsPN2DBjzm3p+gzddk=
Subject key identifier: 16:BE:9A:51:7C:78:27:D0:0B:FB:22:CC:DE:33:4B:F2:EE:34:72:FC
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F43285848A830CB0666D52C3AC0463640
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 7743
IP address blocks: 209.211.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:cb:06:66:d5:2c:3a:c0:46:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=bddf7b26-5636-42b2-98e0-f275cc6d6ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:37:48:2b:e1:00:1d:b1:53:35:b6:42:23:6d:
ce:46:cd:27:87:e6:cd:d5:0c:a9:ed:1a:d4:c9:09:
65:3f:fd:35:a2:40:41:a7:24:7b:88:3c:45:09:b2:
64:f0:78:17:c0:0a:58:b2:9c:ca:2d:58:50:fa:b1:
9d:73:0c:69:c4:fc:2e:cb:1f:09:93:0a:62:00:82:
fa:20:b7:13:1f:85:c8:50:13:31:1a:61:dd:ca:c2:
d2:86:4f:27:1a:a3:df:3d:2d:26:d9:a9:c6:d0:05:
7b:7a:bb:24:dc:ec:ef:70:c6:92:76:ba:3b:a9:d2:
86:63:b5:5a:90:03:ab:a3:23:c7:a1:1f:e9:57:01:
c3:27:98:e9:98:8e:3f:d3:5e:3b:6f:41:25:94:0c:
a9:15:43:33:ea:d0:19:76:9c:de:ab:ec:ee:fd:26:
eb:fb:8c:67:ac:33:5f:db:57:a5:83:d6:32:da:0d:
d2:88:69:94:58:cf:c4:6e:19:7c:d3:06:ec:c0:d8:
76:8f:0f:2c:de:1e:b4:40:2d:c2:11:9d:16:8d:5b:
fe:2f:42:0e:9b:bd:b0:85:5f:6a:fe:6e:a7:f0:89:
b7:c2:07:0c:dc:e4:35:54:08:3c:83:04:42:1d:0d:
2c:71:c9:65:cd:29:2d:39:2a:0b:b4:76:ea:f5:32:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BE:9A:51:7C:78:27:D0:0B:FB:22:CC:DE:33:4B:F2:EE:34:72:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
209.211.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:31:c2:97:61:95:93:8c:53:c6:42:9a:d4:de:65:5f:e5:34:
71:f8:e5:a0:66:16:43:2d:b2:85:5b:7b:5b:5b:cd:bc:1b:1c:
da:7a:f5:b6:fa:db:4a:84:35:5e:c6:1b:00:b3:d1:97:d0:57:
8d:84:19:63:aa:42:c7:84:ae:ba:97:6c:72:be:da:c8:78:ac:
95:e8:42:97:2a:5a:63:a5:14:e8:fa:04:b2:46:6c:58:01:6b:
de:b7:e4:c2:bd:19:61:64:72:01:32:ad:31:12:fc:70:61:22:
3b:22:8d:ff:c3:dd:10:78:bc:50:b8:53:c7:24:23:08:d3:e4:
66:78:88:a4:9f:6a:a1:f1:a0:77:b4:11:e3:32:d1:6b:de:cb:
d2:a8:ae:9f:67:62:bd:71:31:78:d1:bb:5f:70:78:42:87:0b:
05:2a:84:12:4c:9b:52:2e:be:8c:3d:14:5d:42:2f:48:39:61:
d6:08:c1:d4:ca:98:3e:23:6c:97:ad:ea:47:13:55:d7:b5:db:
55:ac:7f:65:98:72:e9:95:f0:f3:e4:88:43:d4:5e:95:31:05:
85:da:41:a3:fa:5a:d4:6d:7d:b5:67:24:b6:e8:8f:47:2f:6d:
0d:24:03:00:69:ab:58:0c:c3:de:bd:06:11:39:b4:3f:31:1f:
29:7c:52:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:51:27 2025 by rpki-client