
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa
File: da1134b4-14a8-3573-ade1-c42f592a22ce.roa (raw, json)
Hash identifier: EuHp1zY62GFgYyR/yRlNOcuVYdEV+ash5zw3/3Z3xvI=
Subject key identifier: B5:53:47:B9:38:F5:A1:98:72:51:19:1C:51:0C:DC:C5:78:88:18:58
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858494CC93CA0BFBF569F352B8890
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 13414
IP address blocks: 209.237.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:3c:a0:bf:bf:56:9f:35:2b:88:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=d3bc6f3a-aff6-4217-aa1b-81c58a7a6353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:a5:db:1f:e2:61:6e:b5:d2:02:54:5e:64:
87:98:23:8b:6f:06:1e:9a:b8:cb:0a:04:3d:74:fd:
33:6f:97:06:f1:fe:78:3f:9c:6d:ca:40:69:49:98:
ea:ba:d1:dc:ce:11:03:c3:70:90:84:33:1d:66:98:
bd:7b:16:ee:53:09:07:f0:98:f2:66:8a:c9:e4:d6:
20:57:3d:84:89:7e:73:bc:c4:39:70:f3:42:29:2e:
02:70:88:0b:fa:c0:4e:3c:3b:b0:06:20:5a:7f:7e:
f5:50:63:0d:f9:74:87:d8:c8:c4:b6:31:1d:56:2d:
02:71:d3:5d:d8:86:78:c5:34:b3:df:40:6d:47:9f:
37:02:d9:be:cb:bf:1c:b2:fd:c9:6d:e5:2c:88:a6:
fa:cf:bc:78:69:dd:45:db:b4:61:51:17:b2:7a:dd:
34:f0:21:af:15:e9:ac:56:0f:5c:cd:16:b8:7a:9e:
62:62:e3:6d:7c:f4:3a:de:c2:3c:77:0b:d1:15:5e:
f1:1b:43:3f:21:bb:d8:0c:1e:46:5c:d2:86:02:fd:
e3:36:d7:c8:fb:86:9f:cb:fe:66:e6:4a:0c:61:d1:
da:c1:ba:ca:25:80:ca:df:2c:54:af:41:6e:8b:b1:
4f:ad:7a:14:ae:45:d4:61:7e:fc:af:13:e2:57:4f:
99:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:53:47:B9:38:F5:A1:98:72:51:19:1C:51:0C:DC:C5:78:88:18:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/da1134b4-14a8-3573-ade1-c42f592a22ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:83:59:fb:43:c7:71:5d:0a:21:b2:71:e4:4a:a1:8d:22:a3:
eb:ba:f4:19:43:47:ee:b1:5b:a7:4b:33:23:11:59:f0:e4:11:
bd:1a:5a:14:f4:68:81:c2:f6:ae:8d:24:61:85:95:4f:4c:d9:
86:c9:c9:42:34:12:6b:3d:4f:4b:5b:34:0f:0b:2f:60:d0:cd:
b0:d8:74:63:e5:ff:d5:d7:19:71:3e:50:65:02:b7:31:10:fb:
24:ac:ab:57:75:ef:da:1e:e5:2e:08:9c:65:5a:aa:e4:8e:a1:
9e:0b:4d:7a:ea:da:a3:ad:be:98:eb:50:89:9d:cc:2e:9e:07:
ea:19:17:d1:87:8b:60:ef:e6:a7:de:99:34:6f:cb:41:52:57:
fe:f0:74:34:d5:f8:dc:12:d9:90:07:c2:52:5c:e3:d1:b4:de:
75:85:16:75:93:43:da:6c:72:3d:f6:b1:7f:e6:3d:74:49:c2:
60:12:42:7f:d3:16:b0:8b:dd:f2:0d:ef:3b:13:75:f0:00:47:
8a:d6:86:a0:42:6c:af:ba:59:b9:11:71:25:ee:e2:16:51:d2:
f9:dc:ea:d1:2b:8d:ac:89:ff:b8:db:e4:7d:4b:52:fb:a6:26:
be:25:16:76:4b:45:13:ed:44:f5:dd:b1:90:b6:28:31:c2:6d:
0e:19:56:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:30:01 2025 by rpki-client