Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/392f74fe-624d-3f70-8d51-c9bcea16980f.roa
File: 392f74fe-624d-3f70-8d51-c9bcea16980f.roa (raw, json)
Hash identifier: URr+9E4R0j3fBRyvlWrZLVvwhkbuP6cxyM5I4iCtmeE=
Subject key identifier: D3:65:65:D8:B3:75:BD:EC:57:A5:C6:D7:9F:FD:96:F4:9E:19:76:DF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D964281D0E073CE776EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/392f74fe-624d-3f70-8d51-c9bcea16980f.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33667
IP address blocks: 209.23.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:96:42:81:d0:e0:73:ce:77:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=7e1fc354-ded1-43a4-a97f-1b880e9cc084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:29:4e:b5:6e:a6:14:85:7a:4b:8f:54:30:
45:43:1a:9c:68:9e:7c:12:1d:42:18:cb:df:a6:f0:
7c:fd:f0:d4:3a:61:c9:93:33:28:39:8c:2f:e2:1e:
8b:06:19:23:7c:37:cd:c1:e1:a3:83:64:2c:09:10:
bb:a8:b3:77:c2:8b:56:3c:22:1c:13:91:f6:f9:9f:
a7:1b:30:06:4d:60:ba:00:c0:d6:7d:5e:19:fa:d1:
37:0b:44:c6:fc:d8:55:6f:74:93:3a:6b:a1:fb:44:
4a:60:b7:31:12:39:02:29:ac:89:56:a4:15:e2:38:
97:a7:35:83:8c:a6:59:57:c2:21:18:c4:f8:7d:d9:
7c:32:4e:7a:c1:ad:b9:6c:37:03:3b:66:22:aa:5e:
ff:ab:d9:b0:f8:dd:75:a1:f1:02:26:db:10:10:96:
03:1a:a8:72:4b:58:75:9a:aa:29:97:71:e4:b2:d8:
a2:d8:f6:1a:0d:e1:70:50:79:f1:8c:25:29:52:4c:
94:d2:60:d6:61:69:8c:1f:06:13:82:7b:1f:bf:c9:
92:33:d5:68:f7:44:ef:d5:58:64:a8:76:78:56:93:
1f:fe:91:13:f3:bf:ee:a7:76:86:2b:ce:0f:8d:4f:
f9:22:59:46:01:7f:20:bb:68:5c:cc:23:79:d6:6d:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:65:65:D8:B3:75:BD:EC:57:A5:C6:D7:9F:FD:96:F4:9E:19:76:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/392f74fe-624d-3f70-8d51-c9bcea16980f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
209.23.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:c3:18:8a:7b:de:8b:f0:9a:4b:a5:d1:4d:af:99:d9:e7:e5:
a9:ad:18:15:0f:d2:ef:de:42:b8:cd:1e:a8:49:16:b1:fb:87:
d6:5e:8f:98:1c:3c:c4:aa:00:82:89:97:77:f0:62:0a:3b:81:
e2:c2:d0:ee:a4:0a:db:3d:5e:cd:91:8a:00:36:10:3a:b9:72:
4e:d3:bc:12:45:b4:91:77:97:9e:90:ee:d6:83:f1:47:90:c4:
45:a2:4f:34:37:93:41:64:f3:3b:dc:2f:24:06:a9:6d:4e:11:
d2:7e:ea:fd:56:d1:e8:b5:93:ca:af:73:1f:b2:76:53:4b:19:
a8:48:58:b5:9e:fb:ba:a5:83:12:2d:eb:92:6f:34:59:9c:b0:
80:84:40:36:35:89:f9:55:d5:8b:31:52:fc:16:83:6a:d1:bd:
c2:7e:e9:8e:35:a3:cd:b3:4e:ed:2e:f7:ff:9b:53:da:45:07:
50:00:bc:38:73:5a:d4:b4:7d:5f:3e:73:60:b6:15:e8:55:44:
e6:cf:fe:cc:02:c6:e5:8c:dc:10:54:d5:62:8c:ff:4d:a8:16:
cc:07:bd:ee:36:46:8e:e6:b3:de:4f:0c:b1:63:f9:5a:5a:b8:
7b:df:69:3e:c2:bf:ff:40:88:01:2d:38:ed:5c:a7:34:44:c9:
41:d7:a5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:56:41 2025 by rpki-client