Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1507e83d-721b-348d-b3b4-68d8e92a0b8a.roa
File: 1507e83d-721b-348d-b3b4-68d8e92a0b8a.roa (raw, json)
Hash identifier: VzFUjJ3QToQi3bbA6dYDi51Z1hwsx4dNGR7Wakr2un0=
Subject key identifier: 5A:B4:3F:C7:7F:32:F3:F1:AC:67:D6:E7:2A:F2:AD:F1:BA:97:30:98
Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial: 010D0C9F43285848C98A34960B6707D641265900
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1507e83d-721b-348d-b3b4-68d8e92a0b8a.roa
Signing time: Thu 06 Feb 2025 00:42:50 +0000
ROA not before: Thu 06 Feb 2025 00:42:50 +0000
ROA not after: Tue 06 May 2025 23:42:50 +0000
asID: 14618
IP address blocks: 209.54.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:8a:34:96:0b:67:07:d6:41:26:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
Validity
Not Before: Feb 6 00:42:50 2025 GMT
Not After : May 6 23:42:50 2025 GMT
Subject: CN=58e4dde2-a1ab-4e2d-b472-2410973c7110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:56:47:ec:8c:1e:e5:e8:bf:74:c7:bc:65:
56:19:85:75:11:9a:7e:5c:6e:14:39:c9:26:a4:7f:
51:64:a4:ea:37:fe:94:9b:89:f1:66:5a:03:99:f7:
17:75:51:da:66:c8:44:28:b7:cc:95:5b:56:3d:34:
d7:35:e5:11:66:a5:0a:12:24:fc:3e:65:cf:d1:2e:
04:8c:a8:b2:65:53:de:8a:fb:84:41:5e:12:5e:69:
ea:18:7e:81:b4:05:97:9b:38:84:5b:c1:c0:38:27:
f9:1c:54:2a:ae:e0:2c:04:5d:2e:a7:ef:ba:11:49:
1f:ce:0b:6a:64:df:c0:15:4d:a3:ab:2e:9c:9a:a3:
45:38:ec:11:9a:06:7b:59:7a:c9:42:b9:a5:cf:a2:
b1:6d:d3:8c:71:b0:24:89:6f:32:1f:13:07:48:68:
26:b1:9a:32:85:39:9b:11:8e:3e:96:37:02:b2:c1:
38:e3:d1:1a:ba:e2:b3:2c:2f:06:87:ad:c0:c0:df:
52:3b:80:cc:df:07:1b:d1:3b:94:83:3c:e9:b4:c4:
ba:ce:31:dc:d0:87:60:e8:63:e1:93:b5:d8:f7:b0:
e9:9a:aa:83:4f:32:5f:6a:6b:c7:ce:c1:0f:92:0a:
fd:4e:94:42:a6:08:39:64:16:a1:8b:6f:87:59:41:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B4:3F:C7:7F:32:F3:F1:AC:67:D6:E7:2A:F2:AD:F1:BA:97:30:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1507e83d-721b-348d-b3b4-68d8e92a0b8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
X509v3 Authority Key Identifier:
keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.54.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:d1:3f:fa:01:2a:9d:96:4d:33:2f:76:73:27:59:e2:67:b3:
43:0e:91:9c:fb:be:63:1b:10:05:a4:1e:17:3b:79:13:45:15:
93:8f:2e:05:85:be:1d:cd:f3:5a:a2:ee:84:0a:d5:8a:6e:7a:
5a:03:da:c2:81:34:f1:ba:b9:a7:3b:ad:67:fc:29:0a:c5:58:
3e:b9:a3:85:b0:f5:d4:f9:70:5a:68:63:20:94:8d:f5:1d:e3:
6f:35:95:84:45:f7:7f:5f:46:74:76:0d:87:c9:d9:75:6e:55:
23:ce:db:d0:32:56:5b:db:6f:b3:e7:4b:4a:f1:22:15:f3:db:
f4:82:6e:93:f0:8c:e2:08:60:62:3b:c3:3c:df:75:55:c4:f6:
56:3a:a4:99:74:69:81:a7:85:bc:e1:04:81:b4:90:38:e9:c0:
db:06:e8:3c:16:36:02:ee:54:db:ed:87:a7:7b:8c:28:15:e6:
b1:2a:b8:3a:57:77:44:61:39:50:03:07:4f:1b:c1:cd:73:5c:
67:25:f3:70:ef:ee:95:88:54:65:37:2f:bd:c4:2b:5e:de:61:
c1:5c:79:61:95:44:2b:f1:d0:ab:a8:35:41:99:e0:43:be:ee:
f0:63:2f:da:65:cd:91:98:ea:8b:ab:4e:00:7f:40:18:3d:5c:
59:81:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:22 2025 by rpki-client