Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/83a858c1-7f35-3305-b7cf-259902de0fdb.roa
File: 83a858c1-7f35-3305-b7cf-259902de0fdb.roa (raw, json)
Hash identifier: nLb284IyvOpfNT+u/KMWYGykvdziULCvboDZt1RCP+I=
Subject key identifier: 8F:6D:9A:1C:00:6A:4A:A5:01:AA:5A:DE:66:45:ED:28:C4:D1:B3:0F
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584957F418F417C8C5E2A8953900
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/83a858c1-7f35-3305-b7cf-259902de0fdb.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 11232
IP address blocks: 209.169.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:18:f4:17:c8:c5:e2:a8:95:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=f664eb3e-ed2d-4dca-a001-4a4262289357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b8:c2:87:52:b7:90:65:1e:1f:65:3a:1e:8c:
df:6c:dc:12:20:e3:83:50:ab:cf:ee:55:b0:05:17:
6b:eb:58:fb:90:59:54:64:6f:ec:f8:a2:85:9e:b4:
3a:ce:d3:0c:db:50:5e:87:ba:7a:f3:25:17:13:09:
a5:0b:f6:42:85:a0:55:c6:ce:f3:96:38:5d:98:76:
14:8b:35:a8:3a:b8:16:01:6f:df:46:6b:f0:93:60:
41:8d:4f:f2:d7:b2:2e:9b:a6:6f:b8:d9:4e:23:1e:
57:7a:46:7b:d5:4b:4d:db:d9:bc:a3:c8:be:3f:83:
15:2a:25:d1:8c:17:a8:a0:07:85:05:d4:31:9c:44:
ba:6b:12:00:bb:91:84:08:d3:62:0f:24:43:18:f1:
c0:58:0d:c0:e2:0e:4b:af:e7:33:30:71:b3:32:ad:
15:c8:c2:9d:c5:e0:e3:93:31:14:0a:ce:10:5b:ac:
2c:60:65:72:b2:1e:53:3e:66:f5:39:6e:54:b5:34:
6d:39:4d:53:40:4f:12:91:aa:57:80:9d:e8:04:b9:
c5:e8:9d:06:e5:f8:4b:6f:a8:51:31:17:5b:ff:15:
59:1a:ea:d5:ad:db:cc:0c:6d:d1:e5:21:7a:e9:67:
3c:f3:b8:39:90:27:2c:32:33:e5:8f:6e:e6:eb:44:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6D:9A:1C:00:6A:4A:A5:01:AA:5A:DE:66:45:ED:28:C4:D1:B3:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/83a858c1-7f35-3305-b7cf-259902de0fdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
209.169.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:07:ad:de:63:5b:df:6e:e2:7c:62:27:ee:49:ab:f1:6e:d2:
20:d3:0e:65:85:4f:d9:69:0c:b3:ff:01:21:8a:46:11:29:11:
b4:a6:81:5b:6a:25:6f:18:c2:aa:b8:e1:bc:b1:1b:cd:fa:5c:
6c:8b:79:e9:9b:6a:b0:6d:4c:04:5a:cd:2a:e3:f9:8f:cc:a5:
b1:0e:dc:f2:a4:4b:6c:45:fb:7b:47:16:a9:d5:34:f5:d9:ea:
79:84:fd:e8:c9:c2:62:6a:6a:9f:f0:df:91:46:c0:12:f9:f9:
5e:89:57:02:6a:95:3f:fc:ed:b9:4a:e3:88:e0:5d:eb:df:47:
d6:31:03:af:d7:0e:1e:9f:41:2c:eb:d6:fb:c3:b5:fd:25:a1:
9a:aa:d6:bf:17:48:72:7b:0c:3b:d6:b1:9e:df:6a:ec:fd:78:
60:1c:0a:69:92:67:25:08:a3:15:ea:63:c0:b8:95:8d:6f:1d:
8b:d0:39:7d:02:13:c0:09:95:16:59:d2:f9:b2:71:4f:b4:97:
2c:81:25:99:53:b4:fa:3a:e3:af:86:dc:35:78:34:4c:da:0a:
a7:1b:25:53:c3:69:47:5f:01:d1:70:a5:63:58:9d:d0:28:66:
8c:1d:de:a9:ea:cf:b3:72:14:20:63:7a:0c:c3:36:48:84:56:
97:d1:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:12 2025 by rpki-client