Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa
File: 10347e71-7fe6-3944-aafa-f5029b5f87c1.roa (raw, json)
Hash identifier: jceFqk+4otr+pZeBVdBAK54/wvPZbri1L7hbnyQiOZA=
Subject key identifier: 99:94:61:F7:18:BF:4D:EF:98:05:68:2A:D5:5C:DC:48:51:3F:FF:DA
Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial: 010D0C9F43285848BBBB86BFAA790132D5A34360
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 398465
IP address blocks: 209.250.11.0/24 maxlen: 24
209.250.21.0/24 maxlen: 24
209.250.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:86:bf:aa:79:01:32:d5:a3:43:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=f736c1a0-6291-4910-b453-0a96720b24af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:69:11:71:a3:08:37:dc:de:70:85:fe:47:
12:59:01:df:09:48:00:b6:5a:48:29:59:65:62:0c:
a8:fc:0e:49:ee:a6:f1:9a:fc:98:1c:e2:f3:9b:6d:
ab:10:39:bb:70:40:f5:57:03:45:7a:7d:75:4a:d5:
b9:85:da:fc:43:a4:04:81:c5:a1:3a:7b:64:f6:8c:
23:5e:6b:dd:bc:93:b9:72:aa:62:69:d3:7b:fa:6f:
96:9b:07:a7:ee:7b:4c:ca:6d:36:f7:f9:e6:d5:8f:
2c:d9:b0:e2:3b:ee:3a:75:71:34:70:fb:f7:be:75:
ee:7d:05:2e:ed:10:71:2e:70:88:57:88:25:36:fc:
9d:ee:cb:8d:3f:d2:1d:4f:a2:b5:3f:5c:94:28:b0:
26:e6:57:f3:51:94:bb:15:3f:78:ac:d4:ae:09:11:
47:58:c8:bf:ec:be:7c:b3:fc:c2:7b:cf:00:09:5f:
72:0c:c0:3b:50:33:34:2e:e7:35:96:47:25:50:e0:
af:6b:e9:e3:52:65:2b:e2:33:ad:ef:4a:11:da:d1:
dc:0a:08:d1:ea:fe:7b:d3:78:60:0a:69:90:3b:9b:
b6:47:88:ab:c0:be:e5:49:e2:f9:a7:f8:5b:23:b7:
b8:da:f0:99:eb:a2:0d:fb:6a:38:1a:d2:e6:70:b0:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:94:61:F7:18:BF:4D:EF:98:05:68:2A:D5:5C:DC:48:51:3F:FF:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
X509v3 Authority Key Identifier:
keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.250.11.0/24
209.250.21.0-209.250.22.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:63:8e:0a:74:34:b0:96:60:57:04:f4:bf:8c:a8:37:8f:92:
e5:c8:a2:01:bc:cb:0e:4e:15:60:67:94:6b:11:5e:d4:bd:bc:
dc:b6:2f:03:be:f2:13:b1:d8:66:a1:33:61:b1:7d:22:f9:bb:
15:ce:2a:6d:53:c9:a9:0f:cb:2e:87:6f:db:a5:44:9c:53:77:
64:db:f0:97:60:31:b2:a9:7e:46:33:6e:8d:87:70:e4:01:40:
57:1f:8c:f1:fd:7a:5c:20:87:eb:1f:41:97:0c:c9:9d:f1:8b:
26:7e:4c:4e:71:54:52:d8:4d:6f:87:51:be:a4:3c:7f:1d:7c:
93:83:97:fb:38:2e:41:02:22:e2:7e:df:91:2d:9e:d7:18:9e:
21:a8:7d:22:78:83:55:3b:83:e1:44:55:f9:0a:c5:6e:ab:bc:
cf:aa:0d:d1:c1:24:87:02:b4:e5:d1:6d:e9:01:2d:88:d7:e5:
36:c3:97:2f:eb:a3:42:35:5e:16:73:7a:f8:59:5a:c6:9b:e3:
2e:b1:48:48:d1:90:38:dc:54:36:45:4f:a1:71:83:e6:04:2a:
39:70:b4:75:79:92:6b:ba:46:56:a3:25:93:80:10:f9:6a:81:
bb:bf:3e:01:94:27:76:5c:e0:0d:ad:d0:c3:5f:87:0e:a5:71:
d7:f8:6c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:44 2025 by rpki-client