Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa
File: 3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa (raw, json)
Hash identifier: jXbJUHmb7+5R+U/7eTg5DD0xARSMbiFEmW4i5Q6N4LY=
Subject key identifier: 17:F1:04:01:4B:A7:CE:06:FF:2C:19:B0:97:62:BB:4F:1D:61:A2:A1
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858494CC93FD2D2634C64BC70A500
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 13414
IP address blocks: 209.237.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:3f:d2:d2:63:4c:64:bc:70:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=43016a2a-278a-4426-9756-4fa209a320ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:35:d2:5f:f1:da:3a:52:27:42:57:09:21:
8d:0d:c4:47:e3:ca:a6:5f:6b:fa:b5:75:20:32:4f:
9c:e4:47:be:21:05:a8:20:ae:1c:0f:44:33:5b:90:
72:aa:04:e5:ca:9a:8b:e2:4f:91:c3:a4:db:88:4d:
7f:94:0b:8f:ed:70:67:de:43:4c:7e:f3:24:de:6a:
91:e9:a0:90:7f:7f:bd:12:08:de:8c:fc:a1:d0:bc:
7f:12:9c:70:9d:cb:29:87:68:de:90:82:aa:0d:de:
02:fe:81:e5:7b:95:2c:19:7f:be:2d:d7:91:1b:17:
56:4c:f3:4e:4f:60:14:05:61:e8:24:57:d5:42:1c:
be:4f:85:f8:eb:f9:cf:0c:35:23:a1:da:c1:74:77:
3d:1d:e3:34:f3:6c:3c:15:c6:aa:d3:28:12:e3:c1:
d4:a0:af:83:1e:63:eb:1e:d3:96:eb:6d:e2:d9:44:
d4:f5:23:cf:e4:65:63:f8:de:0e:74:38:84:33:00:
52:11:97:5a:5d:e7:f4:b9:9b:13:48:91:4b:d3:af:
30:f8:e0:a5:3b:03:d7:11:68:95:65:77:a2:0b:13:
bd:00:9a:e2:68:1a:e0:55:e1:d3:ad:a6:e2:2e:ff:
97:f0:ae:f1:f0:0c:a9:6b:4d:61:4e:a7:34:95:bb:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F1:04:01:4B:A7:CE:06:FF:2C:19:B0:97:62:BB:4F:1D:61:A2:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:aa:04:f8:1c:b6:0d:53:7a:03:5a:42:66:51:7c:cb:b6:e4:
b6:0d:ff:5a:38:a3:3d:dd:14:cc:1c:43:2a:87:1e:14:4e:c4:
d1:ad:b1:fe:15:e0:e0:23:24:d2:36:ec:3a:a1:4b:0a:5e:65:
a3:aa:4d:27:77:1c:2f:ae:9a:3d:a8:30:80:98:d4:b6:d8:a1:
95:b9:16:26:4b:e1:00:ee:67:76:0b:3b:dd:e8:24:55:ef:8b:
57:0f:30:6a:ef:7f:c4:fd:fb:93:99:26:be:89:fc:53:d4:09:
34:60:37:8f:b7:ec:3e:c0:3d:1f:5d:5e:88:8b:c3:4b:c4:10:
77:8a:75:cc:e5:8b:a0:89:1b:50:39:b6:98:da:f9:2b:ef:53:
ce:d0:2b:af:cf:a7:a3:13:77:73:5a:6d:91:ec:08:d0:2b:97:
24:0e:1f:4c:50:83:10:46:ec:e9:b3:45:d9:7a:87:13:ea:15:
a2:82:4a:d4:44:9a:87:7f:60:32:aa:86:13:53:b7:66:36:11:
5e:3e:4e:18:40:4d:53:57:36:9d:98:a0:97:0d:27:48:90:17:
b5:45:1b:11:47:84:a1:f2:fe:bf:8b:17:97:7f:97:c4:a5:54:
8a:62:1d:a6:5b:af:45:12:04:8c:88:34:29:7b:b4:9a:db:5e:
95:55:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:29:54 2025 by rpki-client