Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/931969d2-ed44-3385-9e13-afff2818f089.roa
File: 931969d2-ed44-3385-9e13-afff2818f089.roa (raw, json)
Hash identifier: +4eHjI7J+DkURthEij+yc/cK6FrheBW8spp7y7VTacQ=
Subject key identifier: 34:80:EB:98:3E:AC:01:92:7B:15:6E:54:03:72:67:54:07:11:3E:B0
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F432858489A3B47C3F304874892960200
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/931969d2-ed44-3385-9e13-afff2818f089.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 13536
IP address blocks: 209.198.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:47:c3:f3:04:87:48:92:96:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=e788f42f-c607-4d8d-8db2-8daffeecb0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:87:90:9e:2c:72:3d:cc:27:a5:15:d1:04:
0d:cc:5d:a1:d4:56:7b:56:66:35:bf:ef:7c:04:a6:
59:37:f0:1c:da:25:ff:11:31:90:af:bd:dc:9e:9f:
4a:95:b2:53:06:7a:69:b0:4c:82:46:00:d9:17:41:
d0:8e:fe:73:35:68:db:3a:a1:fd:7a:45:2c:20:c5:
66:f7:d3:d3:ca:a0:20:e2:e6:72:6d:7a:da:02:4a:
3e:f4:29:13:27:90:67:ce:53:d9:68:11:21:79:26:
2e:41:62:c4:b1:43:10:0f:f0:e2:38:a2:7d:29:a8:
9b:5c:76:ce:8d:12:76:0b:ea:fd:89:42:3c:df:c8:
c6:ab:fd:51:3f:86:68:3b:1d:f1:e3:4f:d0:a4:8d:
64:ac:3e:b1:03:35:6d:79:d1:62:cc:e3:6e:3b:8a:
c6:46:81:8e:b6:5a:4e:60:e8:b2:0c:7e:0e:72:31:
75:ca:59:9e:cf:78:f5:22:12:e1:b5:98:5a:34:29:
c1:16:60:17:63:d9:66:24:f8:d8:af:61:e2:26:13:
27:2d:63:b1:b6:d0:f1:4f:df:ca:be:6b:34:a9:8d:
37:9f:34:2f:fd:6c:e9:79:9e:48:a2:7a:28:5c:1c:
a6:98:cc:f0:79:9c:86:d0:c3:b1:57:5b:12:7c:78:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:80:EB:98:3E:AC:01:92:7B:15:6E:54:03:72:67:54:07:11:3E:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/931969d2-ed44-3385-9e13-afff2818f089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.198.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:7a:5f:18:1a:c5:35:18:8c:8e:23:43:39:23:fe:5b:f1:7c:
d7:75:56:7b:50:63:7b:ed:82:88:28:ac:80:bd:2d:d7:6a:6b:
7b:ca:b5:ef:6a:24:8d:9d:81:cb:bc:2b:32:a5:c1:ff:f0:b6:
89:a8:85:eb:57:f1:65:fb:ca:f4:75:d2:38:38:15:96:be:89:
29:e9:44:28:82:7b:40:3a:13:e3:42:85:46:17:2c:a4:73:40:
0e:53:bf:27:d6:87:47:11:7a:2a:14:fb:a4:db:fb:04:31:fb:
db:38:21:63:30:b0:33:d9:c6:0e:4b:41:77:bf:46:a5:cd:07:
cb:12:9f:74:e2:e2:94:4e:fa:54:04:34:65:45:9a:2a:03:62:
08:79:0a:7f:ce:0f:a4:7c:97:db:16:6f:8e:8c:34:6b:62:84:
23:0f:a5:ca:bb:53:ef:4d:95:82:f7:0b:0b:eb:b1:e1:99:ec:
c8:c9:4a:da:19:95:31:23:ef:ff:e0:e5:bf:90:62:49:2a:89:
bd:ab:28:f4:0f:79:14:fb:04:ad:67:18:3c:5a:95:42:2e:83:
8f:ba:79:1b:02:cb:19:4c:cc:da:8c:c2:ca:92:d5:53:9d:fb:
da:66:40:b9:51:92:43:66:68:d9:3d:aa:a2:6b:63:84:8b:57:
74:96:48:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:27:58 2025 by rpki-client