Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/09ef22b3-b713-37e3-9358-54f067bab45e.roa
File: 09ef22b3-b713-37e3-9358-54f067bab45e.roa (raw, json)
Hash identifier: O2iWgoV/mYb3qP4MacpJvPklmwjKnodA7UW2mZYmXrk=
Subject key identifier: 5A:E5:26:89:5E:51:FF:6F:44:97:7A:82:3D:DC:1B:FA:B9:78:DD:49
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584957F4199F6764B590EC795080
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/09ef22b3-b713-37e3-9358-54f067bab45e.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 11232
IP address blocks: 209.169.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:19:9f:67:64:b5:90:ec:79:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=33f8e3e6-6830-4aea-98ff-f892e10b7930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:fd:b8:76:6e:60:19:da:aa:66:76:e0:83:
31:4f:f6:dc:f5:7e:0e:ed:8f:7e:7c:af:dc:28:d3:
fd:0f:91:85:89:ca:27:2a:24:fc:14:fe:78:33:bc:
8c:89:0c:2f:8a:60:3e:e0:b1:35:47:63:79:1f:ee:
6a:61:e5:42:13:a2:9a:34:eb:95:c0:f9:05:ad:ed:
39:a0:7e:f9:2e:1f:ee:76:de:22:a8:21:b0:cb:54:
66:ca:63:a3:94:6c:fc:49:d3:65:0a:29:10:22:5a:
00:48:bd:92:a4:dd:41:0c:81:aa:d7:6d:e8:95:0f:
3a:2d:32:f0:b2:a2:1a:0a:cd:2c:04:b3:11:3f:8a:
cc:93:41:47:af:ac:eb:72:f5:3e:c9:48:97:93:ef:
7f:c1:4c:2c:b9:6e:8c:09:2a:94:3a:43:a2:fa:b7:
8d:4a:98:ea:47:63:07:1f:66:60:74:53:c5:81:9a:
72:10:a0:4a:59:f3:cf:66:cd:bd:40:f5:61:69:fd:
0d:c8:6e:2e:f3:ea:bd:c2:d9:b3:4e:09:8b:57:75:
6e:5d:b6:1e:ef:7f:50:b5:7c:dc:29:e4:54:a8:98:
c6:10:32:e8:3f:7f:65:44:a1:5c:7c:52:42:52:33:
a7:95:7d:f7:17:8c:44:63:27:05:2b:02:c3:79:17:
49:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E5:26:89:5E:51:FF:6F:44:97:7A:82:3D:DC:1B:FA:B9:78:DD:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/09ef22b3-b713-37e3-9358-54f067bab45e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
209.169.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:c3:20:e2:5e:bc:e8:35:8a:ae:6d:c8:a3:d1:8a:6f:2c:02:
bc:d5:ea:7d:32:31:cd:4c:72:43:1f:2d:38:54:d4:5b:d8:43:
ae:e3:c2:cf:60:56:1d:55:ea:72:32:92:ae:ea:83:9d:cd:82:
79:e6:c7:90:e4:4a:2d:f3:0a:e4:ad:7f:8c:8a:78:21:dc:6d:
47:a4:a2:68:b4:e3:72:e8:a4:97:76:0a:0a:a9:2b:5c:cd:29:
6e:0a:d5:79:a9:e9:e6:52:f7:52:6c:19:39:d0:8e:23:56:02:
b8:ec:99:50:f4:1e:8e:33:3d:fc:31:09:3a:86:81:40:47:08:
af:11:02:ff:07:c9:a5:63:16:b5:f0:e3:10:79:a0:84:91:dd:
d5:a2:53:af:ff:79:55:45:f2:36:08:bc:e6:99:66:39:d2:57:
74:66:5e:10:7a:59:81:14:75:13:e8:5b:b8:a3:8c:90:e7:1e:
e6:5b:52:80:b1:5a:db:5a:74:6f:33:76:3f:5f:1c:cd:d1:ce:
17:70:e4:63:18:f5:e4:93:f2:77:10:ec:ff:fd:20:c8:1c:f6:
9e:1b:d5:ab:b2:09:32:2a:80:25:3d:18:60:0a:96:04:0e:dc:
31:e9:ae:aa:27:68:6f:d0:9b:fc:90:df:d7:5e:3f:0a:36:fe:
31:5c:92:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:19 2025 by rpki-client