Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ecb79349-c2c5-3e1a-b870-5737e013da06.roa
File: ecb79349-c2c5-3e1a-b870-5737e013da06.roa (raw, json)
Hash identifier: Ighq9RR9WE0DvUcDiADEf0eKgXPG+OQ37t0nJmyMHio=
Subject key identifier: 3A:3E:01:99:54:8E:D6:54:36:82:D6:78:0D:09:15:25:04:6B:8D:C6
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F432858489A3B47D6E289101A26E40420
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ecb79349-c2c5-3e1a-b870-5737e013da06.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 54989
IP address blocks: 209.198.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:47:d6:e2:89:10:1a:26:e4:04:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=68360c86-2da0-4ccb-9a02-a639e4f57264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:8c:82:9d:49:35:a7:bd:c8:18:40:c2:e0:
ed:20:a6:94:cf:14:77:ea:d4:33:03:9b:69:f4:ec:
16:5e:63:05:a6:52:49:b7:f0:80:c0:76:c8:a9:fc:
b2:82:1d:1c:e7:2c:db:5a:17:77:84:5f:4f:0c:44:
9f:0d:4e:ea:88:c0:de:eb:00:31:92:1c:4d:b8:ed:
4b:25:fc:26:8e:0a:61:6b:42:d0:af:b6:08:6d:85:
11:98:04:1d:7e:61:1b:e9:58:01:25:5e:61:3b:11:
c4:97:66:e1:54:e2:c3:28:95:a1:42:9e:66:86:a2:
01:a7:70:6d:bf:be:3e:e8:7c:2b:95:58:18:02:9d:
9f:6b:4e:56:d4:bd:1a:a8:61:f5:f8:9d:ad:e5:2b:
0f:16:f8:29:a5:34:3e:43:08:ae:99:e6:fd:2e:5c:
fe:e5:29:f9:ea:15:0e:c4:0a:9d:44:42:ca:22:0c:
db:17:85:df:7c:c8:23:c7:dc:dd:65:47:e8:75:5f:
95:f0:ce:a5:6d:9b:a0:d4:c5:d1:04:85:b0:7a:a4:
c6:e3:e3:04:2a:ef:47:25:22:dd:b5:a4:fb:aa:ab:
1d:3d:c2:49:4f:50:08:61:ec:1a:22:64:35:be:6a:
26:e4:49:69:18:fc:5c:29:94:a1:fb:25:ed:19:18:
df:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3E:01:99:54:8E:D6:54:36:82:D6:78:0D:09:15:25:04:6B:8D:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ecb79349-c2c5-3e1a-b870-5737e013da06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.198.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:2f:54:bf:04:c3:2f:a4:14:00:69:97:c1:ea:03:48:5e:88:
22:2c:f6:6f:59:70:5a:80:37:77:a1:9f:bb:da:3a:31:99:91:
7e:67:eb:8c:d8:bb:ea:ff:99:14:8d:59:3f:ae:04:68:73:9b:
2e:a0:2e:75:05:f7:24:09:63:bb:f6:82:bd:a4:f3:72:66:a5:
da:05:5d:ef:ad:f9:2f:99:a9:3b:fb:70:02:43:d5:19:fb:9f:
b3:db:c4:a4:54:ca:94:0c:19:36:59:d1:65:62:d5:c7:e0:26:
c0:b4:8a:f1:25:3c:bb:56:a6:02:9f:9b:65:0c:d6:c7:81:47:
30:f3:cd:b0:07:be:37:08:e8:4c:4d:f7:a1:cb:8b:b6:50:a8:
d5:4c:dd:6f:0b:97:fe:98:62:09:77:d4:cd:5f:e2:0f:af:3e:
b2:d5:38:8a:44:4d:6c:7c:a7:5c:3c:ca:32:52:0c:40:9a:2e:
30:4a:34:e0:1f:11:d8:98:66:01:d0:8d:01:26:cd:1e:52:87:
99:db:cc:3b:28:b2:10:b6:8b:ba:bc:9f:c4:fa:24:1b:e7:4d:
f6:e1:d4:af:56:72:4e:8a:ae:9f:30:70:7a:15:a9:5f:ed:75:
f7:43:93:54:66:a8:c7:69:d3:47:e1:9a:5c:6a:a7:c2:ba:11:
3e:d4:ab:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:21 2025 by rpki-client