Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/85230b1a-b149-3de2-928b-3e323dee805f.roa
File: 85230b1a-b149-3de2-928b-3e323dee805f.roa (raw, json)
Hash identifier: IOGT6uYo+KnrFTX6G8BfuUBZsme/fB4ReceFm95jB8Q=
Subject key identifier: 44:64:E0:48:B5:91:2A:3B:1E:DA:82:9A:91:2C:29:19:7C:69:55:0C
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F432858487E5063C929C8469222E94F80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/85230b1a-b149-3de2-928b-3e323dee805f.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 15197
IP address blocks: 209.133.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:63:c9:29:c8:46:92:22:e9:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=76b8fda7-56d3-4933-906b-cb4debbd525e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:14:b2:25:b6:9b:3a:83:4f:4d:1c:cf:09:
c0:c0:05:40:24:b5:e5:31:71:36:b0:09:60:5c:05:
d2:37:2a:c5:c8:a9:2d:60:f4:01:9b:09:95:3d:20:
20:24:ee:62:1d:9a:68:3c:c5:2f:23:be:31:b4:62:
cf:be:23:2b:8d:62:87:09:8e:53:5c:76:42:72:e7:
7e:e3:83:ab:82:af:d3:34:b6:7e:09:ad:2d:31:37:
01:34:bc:9c:0f:b5:b3:0f:63:2b:8f:65:89:47:54:
0e:ef:a7:92:a2:69:82:45:21:62:6a:b0:93:20:68:
44:fb:9b:b9:c8:b0:2e:1b:01:14:31:5b:b6:55:1c:
ef:73:c4:17:9d:00:9b:9f:f7:08:e6:5d:72:75:31:
72:bc:40:8c:ef:64:64:04:24:2c:7f:0c:2c:01:22:
c9:2d:13:b5:50:1d:e9:5a:ec:44:5b:bf:6a:db:10:
a8:bc:7c:1c:0e:0f:cf:48:81:94:98:d3:93:75:f6:
9e:89:70:95:08:23:6c:2e:ba:5a:db:13:63:dc:fb:
d6:5b:ce:7d:48:d4:8f:6f:b5:d6:e9:31:de:7b:41:
e4:b1:90:f3:a4:f8:87:a5:c2:cb:fe:e3:07:83:d5:
88:36:ee:cf:9b:62:91:ea:1f:42:f4:20:25:d1:2e:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:64:E0:48:B5:91:2A:3B:1E:DA:82:9A:91:2C:29:19:7C:69:55:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/85230b1a-b149-3de2-928b-3e323dee805f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.133.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:51:95:bd:0f:7a:6a:4f:32:4d:80:bb:92:a8:6d:d3:81:5f:
40:58:09:e6:11:44:35:94:df:0e:4f:4a:ac:52:a9:58:33:0a:
fd:c0:4f:21:d7:49:22:62:ed:31:2e:bc:20:82:a2:ff:ec:2b:
12:bc:91:f2:c3:89:16:e4:e9:85:62:d7:ad:c3:01:d8:84:b9:
be:3e:27:49:1c:df:b9:28:95:2d:a3:66:89:0f:a5:f5:bd:bd:
cc:a4:e0:21:cc:04:d5:bc:42:2e:66:0b:b4:21:cb:dd:cd:fd:
91:30:b3:70:88:76:8d:8f:30:67:a6:fd:41:3b:61:29:e8:8c:
01:d7:a8:d0:a4:f2:6d:8d:55:1c:4c:c5:80:5b:9f:64:77:6d:
9d:15:64:42:9c:b8:6b:14:48:b5:f1:a7:31:a7:dd:09:ee:27:
0b:f3:53:37:7f:93:82:e4:10:6b:b7:02:98:53:3d:31:92:ab:
b2:5b:2e:17:62:7f:5c:f5:db:21:f0:84:05:6d:33:12:14:8e:
c2:c8:7b:7c:f5:e4:ca:13:dd:c5:fa:04:30:1a:59:aa:aa:24:
dd:f6:ee:a2:de:2d:31:3a:d4:e6:1d:79:2d:1e:3a:89:bf:b9:
04:07:9c:95:84:5e:04:96:12:3d:4c:53:b9:48:08:68:c3:36:
8a:7e:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:09 2025 by rpki-client