Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f94bd76f-26db-3baa-9cf0-9560be7adc04.roa
File: f94bd76f-26db-3baa-9cf0-9560be7adc04.roa (raw, json)
Hash identifier: x5FXNXwPOdyIRO5OaFON28kdPWIsktAsXuhZE56NjyA=
Subject key identifier: E2:8A:76:E3:D8:75:E2:B0:A6:4E:99:C8:DF:36:CA:15:E0:A0:08:2E
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858494CC93CC513895F59DAE47E40
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f94bd76f-26db-3baa-9cf0-9560be7adc04.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 13414
IP address blocks: 209.237.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:3c:c5:13:89:5f:59:da:e4:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=6ade548b-a7ea-41cc-a4b9-dbb5a30be59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:e8:ad:e3:3d:aa:d2:f2:8f:55:94:d3:ab:
64:4a:06:11:ce:12:16:02:d9:b0:78:f4:3d:1e:6e:
2b:9b:2f:ea:49:44:42:92:17:00:26:f5:8a:58:32:
34:a9:92:fd:3d:b8:bc:6d:fa:73:2f:df:7b:2c:fb:
07:ef:0c:46:80:0c:17:25:41:94:90:ab:de:1a:7f:
de:16:c8:00:52:00:fc:71:9d:17:1e:ad:9e:cc:da:
83:ad:c5:7f:ab:e4:cb:4e:a1:d7:0e:81:93:9c:4e:
5b:d6:dd:a6:03:bf:17:a9:21:49:c9:7e:18:15:89:
20:2c:3a:52:cd:8d:57:3a:6e:b1:15:9a:88:95:d2:
50:4d:40:a4:75:f9:f4:9c:ea:91:13:0a:ae:b6:54:
6a:e2:06:98:1b:76:67:99:04:a9:65:68:98:8a:b4:
e5:fe:3e:f6:2b:ac:73:13:e5:f3:f9:c5:5d:c5:90:
77:2f:65:67:b4:07:67:ce:01:0e:6b:b3:3a:7d:0d:
c9:d0:91:d7:53:b7:f0:c0:6b:8f:04:b0:67:aa:a5:
d9:fa:8f:c6:69:93:ef:db:78:83:d5:fe:6b:a3:e5:
29:13:43:d3:94:f9:78:c5:ba:11:bb:37:74:45:7f:
d8:60:57:53:0f:15:72:1b:09:18:26:d0:7a:d4:6e:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8A:76:E3:D8:75:E2:B0:A6:4E:99:C8:DF:36:CA:15:E0:A0:08:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f94bd76f-26db-3baa-9cf0-9560be7adc04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:84:b2:54:84:02:f1:ee:8b:ed:a3:68:89:6b:e4:4f:c4:c7:
5b:bf:6a:6e:21:cd:13:99:f1:26:6d:e3:44:75:68:21:66:f6:
ae:be:83:35:50:34:50:8c:77:a1:fd:f2:b5:38:62:ff:dd:35:
de:54:17:89:2a:a3:39:35:72:5b:ae:91:56:28:a8:d3:d0:ec:
39:59:56:bf:29:d8:46:a6:e0:34:4f:d0:2b:ee:7c:b6:bc:ad:
55:66:be:4e:b7:35:f2:cf:e0:5d:36:54:d2:4e:3c:0d:92:53:
33:d1:c6:7b:b2:01:cd:4d:84:a6:b5:e8:a0:6c:8e:0b:eb:f0:
b9:98:12:26:b7:a9:01:7e:15:aa:d2:83:43:57:02:9f:a8:ba:
72:d4:ce:a3:cc:4c:8f:53:9b:a3:51:43:f6:4a:ba:fe:3b:fd:
79:50:93:72:df:a7:28:b1:94:f0:3a:28:d4:ce:f5:5c:5f:79:
c5:59:6e:af:9e:a1:48:7f:a9:d9:e3:4c:bf:3d:2b:37:bd:c8:
fd:a2:de:c5:61:9c:22:17:f1:18:0b:d5:8b:de:8e:f8:6a:27:
a0:93:ea:a5:b9:71:39:ae:9b:b1:06:61:b0:66:a8:06:c9:a9:
1b:17:3c:4b:b9:04:08:61:64:c8:d2:d7:1f:03:09:75:be:40:
cd:82:ae:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:14:59 2025 by rpki-client