Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa
File: aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa (raw, json)
Hash identifier: seP+YwDmX1NnA09YPBX5RP7ma4KStzWZz2cNAleWr5Y=
Subject key identifier: 69:B6:28:97:7E:6D:66:17:C1:AC:F9:83:39:69:28:44:A3:56:EE:A3
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858494CC9406A121B86AB590FF100
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 13414
IP address blocks: 209.237.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:40:6a:12:1b:86:ab:59:0f:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=bdb950c5-ccdb-426d-8473-6092afcc32fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6a:e6:a0:eb:da:12:d4:b1:c5:71:a8:6c:ef:
ff:0e:4c:bb:de:69:c6:6b:48:4e:0c:1e:1b:5b:58:
2f:53:23:4d:00:5d:39:f1:dd:4e:16:c2:99:83:2c:
3e:8a:f1:4c:6a:26:89:9c:7a:59:aa:7a:1b:0e:e0:
fa:63:8f:ea:86:e9:61:23:21:8d:e3:80:c5:fc:ae:
65:8b:b7:84:39:9f:c9:6b:2b:64:3d:8b:68:e3:10:
34:31:d4:f1:d0:9e:06:a3:b5:0a:c8:56:2d:c9:37:
11:e6:fb:c7:a5:ab:d6:f9:14:de:f8:93:e3:a8:ca:
c9:0f:d8:d4:44:15:a7:e2:10:14:8b:e8:60:5e:15:
5f:dd:18:2c:0b:d6:25:c1:34:fe:8c:10:5a:0f:0f:
32:bb:3f:e7:b9:60:69:59:8f:48:79:e3:f1:e1:97:
8f:d4:e7:c2:f9:b4:6a:2b:79:45:96:ed:5f:6f:76:
db:6e:a8:58:11:b1:8f:b2:38:c4:25:18:73:b0:07:
e3:89:4a:86:ec:5d:e8:87:a5:11:70:80:25:01:3e:
df:ac:83:64:0f:55:28:0c:ad:2b:86:fd:9a:ad:14:
f2:e9:e3:41:ee:f1:ea:64:fc:64:a7:2c:33:92:d2:
af:a2:ee:51:33:8c:51:eb:4b:da:6d:1f:3f:c4:41:
88:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B6:28:97:7E:6D:66:17:C1:AC:F9:83:39:69:28:44:A3:56:EE:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/aa0f7c4b-9ea3-3bac-8534-6ade56186558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:03:71:53:bf:e3:88:f0:b1:a0:58:87:eb:af:8c:5d:ec:61:
7a:3f:cb:da:6a:5b:1f:b2:be:3e:cd:ad:a0:7d:ac:17:c2:58:
c0:5b:76:89:24:58:74:1f:1e:f5:f2:e5:93:dd:1c:2a:f2:f3:
6d:d0:50:e2:51:7b:36:f1:09:db:5d:02:36:76:33:cb:2a:18:
81:03:4f:e4:ea:e0:15:25:18:cd:fc:f0:75:16:0c:c3:4b:c3:
cd:18:1c:a6:0c:ce:b4:9e:1a:0e:7d:c7:76:1f:0e:b4:c5:b1:
4d:9f:30:a1:97:54:7c:95:0c:cc:71:6d:5a:5a:2b:2f:66:5e:
bf:64:a6:17:c0:35:ab:d9:f7:ad:5b:f4:0f:6b:f7:fb:de:5b:
76:3d:2b:16:72:cb:1d:8d:b7:c0:65:31:11:40:7f:0e:02:f1:
79:4a:c3:c5:78:7e:03:3f:c6:e9:b5:09:6e:c2:03:89:4a:22:
ca:67:a2:b0:61:bb:2e:3b:87:b5:0a:e7:df:6f:04:aa:b8:5e:
b2:9c:3d:47:c6:f5:74:4c:8a:18:f1:f9:df:36:eb:d6:87:42:
3f:32:e6:6e:7f:56:0e:84:c0:3e:f1:32:9e:d4:17:cf:1f:e7:
03:7b:ea:f4:7d:60:dd:83:d0:2e:eb:6d:f7:98:93:74:9d:4f:
1e:04:f6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:32:29 2025 by rpki-client