Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa
File: a84baf16-04c5-3be6-b2ff-91936a207335.roa (raw, json)
Hash identifier: O38IGTEWhDAtBMkAkvJ3tO3Rvjx0tFakaQTEd/KJqVI=
Subject key identifier: 6C:37:2E:2D:2A:5B:94:F3:D7:B8:97:1C:38:98:0F:CE:2A:CE:F5:75
Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial: 010D0C9F43285848BBBB86919CDA0B4026EDA280
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 6079
IP address blocks: 209.250.11.0/24 maxlen: 24
209.250.21.0/24 maxlen: 24
209.250.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:86:91:9c:da:0b:40:26:ed:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=1b49b27f-5c68-4481-9f4a-fe0801bb2aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:11:31:b5:30:a9:d7:ea:1a:87:25:e3:fd:
a1:5a:c5:8c:65:51:84:9c:90:85:6f:dd:5e:c4:bc:
ff:85:28:ea:04:44:86:cf:a8:3c:45:5d:cd:c1:e1:
cd:bd:26:93:25:fe:10:0a:8c:a9:0c:9a:9e:62:03:
29:56:7a:61:29:1a:2a:4d:b2:7a:38:8d:86:fc:68:
be:0c:e1:f8:35:94:42:3d:8b:87:75:86:77:18:16:
08:97:ca:12:82:91:4f:6c:9a:11:33:19:89:85:44:
a6:ce:59:58:2c:fa:90:ac:02:ef:f0:cb:4e:d2:e6:
18:96:59:93:fd:2b:8e:49:72:20:4d:2c:ee:7b:32:
8a:bf:bf:64:36:8e:99:d2:c1:6d:81:ed:88:18:c2:
07:58:8a:bd:a7:b4:ec:7c:82:24:0a:48:f3:94:85:
84:be:e3:e4:64:3f:e1:15:7e:4c:73:aa:f2:c3:12:
0f:99:75:6c:fd:2b:09:dc:74:87:cd:0b:55:a4:65:
0b:e7:fb:69:82:72:e6:fd:9f:19:20:20:df:27:62:
86:93:2c:fe:bd:00:e1:3a:66:f7:8d:fb:37:4b:98:
c9:e2:5f:7a:dd:1a:20:a5:ae:f1:72:3d:f5:6e:91:
bf:c8:6a:6b:f1:d0:dc:3a:5d:59:8b:2c:e1:4f:7b:
3a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:37:2E:2D:2A:5B:94:F3:D7:B8:97:1C:38:98:0F:CE:2A:CE:F5:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/a84baf16-04c5-3be6-b2ff-91936a207335.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
X509v3 Authority Key Identifier:
keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.250.11.0/24
209.250.21.0-209.250.22.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:65:ab:28:c3:56:0c:ef:b6:d5:fb:b3:69:6d:db:6a:72:7d:
3f:be:ff:7e:a9:68:f5:b1:0b:14:cd:5f:91:83:a5:d9:25:7e:
80:25:1a:98:81:39:f8:bd:3c:bf:fe:36:19:43:57:50:5d:76:
f2:ae:f3:be:b1:8e:0c:af:d2:9e:f5:8e:e0:1f:bd:b2:83:94:
4a:35:b6:4d:06:ce:42:ba:15:46:e9:b0:a5:4a:56:5d:25:9b:
3c:eb:42:c8:dc:73:dc:6c:5c:37:c9:39:ea:3a:b2:89:a6:e2:
25:87:cf:83:d0:da:4a:c7:c0:7b:1b:12:4b:c1:54:ca:6a:ca:
40:3b:a1:cb:ea:6c:7e:0f:65:92:a7:d3:ae:47:f6:d7:ad:c6:
4e:4e:ca:e7:12:ad:c9:e7:e4:ec:7b:be:b1:0b:3c:0c:4e:20:
4d:b7:e7:93:a2:b8:f7:8e:84:f6:6e:52:0d:50:22:7d:bb:48:
e2:9c:86:58:4c:49:10:5d:c4:e7:d3:d0:fa:24:e2:94:22:cb:
e7:07:44:4a:8d:97:b5:9c:5d:e0:60:86:71:5c:8b:46:e7:93:
36:c5:54:8b:98:06:7d:fb:48:ea:a8:f7:f1:f9:ca:32:99:5f:
38:c6:26:2e:56:43:2b:7c:72:a1:1a:a5:59:ff:3e:cf:ff:94:
f4:68:54:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:18:39 2025 by rpki-client