Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d075430f-73bd-33c4-abde-4cea25643dd0.roa
File: d075430f-73bd-33c4-abde-4cea25643dd0.roa (raw, json)
Hash identifier: pMSjsxQPyGmCszkK974bnzUSPfgl53H/XrvZvZ5a/pA=
Subject key identifier: 18:C8:ED:3D:C8:83:D6:D4:0C:88:8B:BF:AD:7F:84:A7:66:EC:0B:8B
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285848D64117B0F1F85D53971D6C00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d075430f-73bd-33c4-abde-4cea25643dd0.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 63182
IP address blocks: 209.242.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:17:b0:f1:f8:5d:53:97:1d:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=07ea4925-0cda-4fd8-8404-9cf5da5e0767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:52:f1:1f:4e:98:aa:b7:4c:63:76:ea:f7:
fc:6c:94:4a:59:0f:1f:34:ab:66:10:f2:98:6c:ca:
ba:67:5c:cd:d6:bb:02:93:95:2c:b0:08:b4:54:1d:
fe:50:35:ff:5b:81:91:85:43:2d:4d:64:2f:86:72:
5d:a8:4a:12:03:a6:20:43:40:a4:f4:70:ea:77:bb:
cc:a9:c5:6a:2a:f5:a3:02:a4:53:1a:db:d2:5c:c3:
13:e0:b8:df:93:ee:3b:fc:55:bf:e8:c8:e1:ca:e5:
98:74:58:e8:f0:f6:d1:ec:38:96:4c:37:dc:7f:10:
af:c5:fd:74:ff:df:ac:6f:b0:d0:3d:cb:c9:b9:7a:
ab:1f:15:85:77:18:ae:76:bc:de:ca:63:08:12:4a:
81:47:cc:dd:c3:ca:f3:10:60:2f:99:c6:36:1a:50:
98:63:59:a7:bf:00:92:7a:e0:28:00:42:b3:22:8e:
9b:30:25:41:3e:86:df:ad:d9:f3:92:ef:ec:87:0b:
bf:01:6d:fa:8b:d3:83:91:de:bc:a6:df:fb:59:be:
ad:d2:e1:ec:88:ff:62:f6:5d:5d:a2:60:ab:1c:b4:
7c:0b:a2:61:ed:f0:be:cd:ab:04:ad:9f:3a:08:d4:
bc:9a:ad:0d:77:1b:a3:96:61:41:69:7e:65:f2:e5:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C8:ED:3D:C8:83:D6:D4:0C:88:8B:BF:AD:7F:84:A7:66:EC:0B:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d075430f-73bd-33c4-abde-4cea25643dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.242.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:7d:34:6f:fa:66:76:47:87:c3:71:33:13:65:ec:39:77:c5:
dc:29:3b:05:7f:d8:06:54:55:16:2d:5a:21:ff:21:0e:0e:1b:
6f:31:a1:b1:af:0b:33:16:4c:68:8e:1e:d5:68:f9:40:ce:7d:
0d:8e:dd:c8:60:06:c7:c7:de:02:ad:ec:67:f7:42:23:e3:03:
e9:0f:06:c5:50:83:83:59:0e:28:81:a4:00:41:eb:63:00:63:
e6:80:ff:c4:32:1f:e2:1b:22:ea:82:4d:2c:f9:68:2a:04:2f:
d4:ab:8f:5b:29:a3:f4:3d:a2:53:70:5c:88:9d:10:d5:6e:91:
97:b3:7e:48:f3:ee:2b:fd:f3:5c:80:46:3c:ee:e3:15:98:a5:
b4:5b:94:64:43:2e:db:07:7d:b0:b0:97:bf:d2:4b:61:d0:7f:
0a:31:54:f9:e0:fc:5c:bb:01:1d:48:74:6b:04:99:ee:18:5e:
12:e5:d0:43:47:af:2e:81:ee:6c:3c:14:54:70:16:d3:96:20:
03:bc:43:3f:4c:26:c3:f2:d9:7a:7c:91:c7:54:5e:7a:ae:2d:
11:cf:39:3c:be:9b:9c:7f:9d:1a:68:9a:62:ff:87:8a:da:b8:
77:3c:de:c8:42:05:b9:c7:f4:58:f3:eb:ca:fc:18:1e:85:b6:
7d:5d:10:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:02:06 2025 by rpki-client