Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa
File: 79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa (raw, json)
Hash identifier: nEsPw8UOIZ0ugWPQPyLPhq0DZrz/7gvJ4aRajYbcTsw=
Subject key identifier: 62:EE:3A:B6:2A:C8:E1:3A:E5:EE:4A:0A:9E:D0:60:79:86:C6:33:9F
Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial: 010D0C9F43285848BBBB86AEE5B09C6E69124E00
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 7922
IP address blocks: 209.250.11.0/24 maxlen: 24
209.250.21.0/24 maxlen: 24
209.250.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:86:ae:e5:b0:9c:6e:69:12:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=24c43188-0d5d-4782-b7f2-48dc6a0c4096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:82:44:b1:02:3f:b4:6a:43:81:ff:3d:e3:
e4:0f:34:a2:b2:d2:74:42:ff:13:31:9a:9f:cb:30:
6d:49:01:4b:48:24:33:c9:bc:33:20:c6:aa:58:bd:
af:aa:2c:22:20:86:50:0d:1c:3a:bd:9d:63:5f:43:
2e:07:ff:46:65:14:1b:d7:42:b9:48:c4:d1:ce:b9:
12:34:8d:d4:4a:f2:5d:37:b8:9f:5f:01:e1:af:d0:
ee:f5:6d:68:37:79:d9:b2:fa:f2:f0:4e:09:ed:6e:
6a:b5:c5:23:ef:0c:62:d5:45:1e:b8:11:ec:e5:c4:
db:26:7e:43:66:12:43:9e:2d:7b:3a:4c:df:74:cb:
eb:51:ac:5c:aa:8b:a0:7f:9f:40:ee:34:f0:76:61:
a6:53:06:56:ed:64:44:3f:d8:85:2f:5b:f9:04:4a:
31:ae:e1:46:c7:e7:fc:e8:1d:f4:7d:cd:65:23:76:
dd:cd:97:1a:2a:fe:c0:3b:f1:35:d6:01:97:75:5a:
55:9f:52:06:16:23:e1:11:48:f7:50:41:90:3f:f7:
52:91:83:6f:66:42:aa:83:ea:54:98:3c:dc:3a:b8:
69:77:7b:3d:5c:24:bb:3e:44:31:9b:bc:75:38:14:
6b:aa:9b:43:56:ff:36:58:13:ce:4f:f7:81:ee:3a:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EE:3A:B6:2A:C8:E1:3A:E5:EE:4A:0A:9E:D0:60:79:86:C6:33:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
X509v3 Authority Key Identifier:
keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.250.11.0/24
209.250.21.0-209.250.22.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:91:07:b0:a6:0c:a5:11:00:25:36:7a:3e:8c:f9:49:3b:2b:
4e:21:11:7e:ca:f3:60:74:3e:f2:b4:f9:52:a1:95:3a:dc:28:
a7:81:80:28:87:79:3e:2e:93:03:91:cf:a6:f3:4f:31:4c:16:
85:6b:2b:27:52:1b:0e:91:dd:97:07:4e:47:d1:ba:ba:bb:fa:
30:8b:f7:e1:cb:cf:6c:ee:c6:81:fb:8f:4c:c7:a6:55:2a:e7:
14:2d:39:62:53:b7:a5:d2:1e:b6:91:9c:e9:a5:2a:19:c3:e5:
9b:b2:f0:46:3c:57:6f:15:8f:e4:44:ec:e8:48:dd:b3:97:59:
2c:8d:af:8c:ac:7b:ea:f0:9c:1a:ba:7a:dc:ef:b4:57:4a:5e:
b7:f9:25:e5:f5:27:5c:38:39:97:09:a0:08:ff:b0:76:26:cf:
5d:5b:95:11:01:b2:39:1d:e5:62:63:56:9c:be:04:59:62:05:
a1:61:2a:b5:cd:26:89:a5:1c:fe:6e:ed:4a:ba:50:cb:2a:48:
60:d8:2e:13:33:91:41:37:54:bf:52:09:91:4a:99:f2:f8:44:
16:dc:d3:b9:cc:93:60:9d:3a:97:0f:e6:0a:27:bd:04:b9:93:
7d:51:7b:b3:61:ea:b6:63:93:dd:1d:d4:12:c0:ea:48:27:0a:
bf:8d:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:28 2025 by rpki-client