Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bca7e783-65b3-3ef5-a98f-f1d47a3e9864.roa
File: bca7e783-65b3-3ef5-a98f-f1d47a3e9864.roa (raw, json)
Hash identifier: fatDmfzlpBmJS/j/dVsK6xX9Ongq4Jz0li6JFJpqi9s=
Subject key identifier: 8B:D5:96:01:C3:A4:84:C4:5C:AC:A6:9E:F0:A3:42:64:AE:2F:ED:94
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285849071BE3B374C8824C23EC00E0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bca7e783-65b3-3ef5-a98f-f1d47a3e9864.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 63397
IP address blocks: 209.66.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:e3:b3:74:c8:82:4c:23:ec:00:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=61084594-b2a5-4be6-bb81-58fb0310d383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:17:f2:2b:91:0b:e2:61:78:a5:e0:3b:13:
71:2e:22:0e:9a:dc:e5:0b:cf:a2:39:e8:c9:a3:f3:
11:70:63:30:11:85:0a:f7:bf:e7:3d:ae:b3:8a:17:
6f:dc:dc:df:6c:88:2c:f3:84:30:cf:e7:b3:bd:ea:
c7:bf:45:87:c2:8e:de:c3:72:8d:f3:04:a7:ca:87:
c2:ac:35:1f:e5:42:91:b4:33:f2:fc:e8:6d:5c:7f:
20:e9:72:3d:70:d2:16:2a:c8:2a:d0:8f:9a:26:7b:
c5:69:6b:9c:1b:eb:69:98:5f:96:48:65:4f:af:b7:
6e:92:eb:ff:16:b4:fd:d5:43:55:c1:51:18:07:f3:
d4:c7:52:1c:77:f3:7c:21:bb:bc:8d:51:9b:81:e1:
b8:bc:d2:1f:fd:2e:d2:0e:d0:c1:dd:63:64:44:0c:
ee:c6:cc:dc:77:90:09:b9:5f:75:bc:a3:13:e8:e3:
06:4a:0a:e3:08:0a:23:89:2e:0a:c4:5a:f8:c1:99:
bb:36:d0:f3:42:d5:c8:37:b2:fe:f9:02:cb:de:77:
1d:9a:c7:6e:4e:47:d3:bd:67:ba:89:78:78:c3:96:
93:5e:3f:3b:d8:41:48:b6:a6:1d:f4:a2:3a:63:c1:
04:31:2d:51:43:d1:0e:22:b2:72:1d:ca:8c:42:b6:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D5:96:01:C3:A4:84:C4:5C:AC:A6:9E:F0:A3:42:64:AE:2F:ED:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bca7e783-65b3-3ef5-a98f-f1d47a3e9864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.66.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:09:1c:d6:8e:11:e4:dc:16:0a:ef:b8:e0:4e:a5:9d:08:d4:
42:79:14:2f:37:a3:39:9b:51:50:7c:6d:1c:8e:5b:7b:78:94:
da:5e:bd:59:fb:fa:18:55:6d:98:4a:8f:a2:c7:9b:08:2e:2a:
3d:49:c3:fd:be:dd:93:d9:73:e9:e7:80:7e:56:ca:87:03:dd:
10:46:65:ed:3b:99:f6:c6:fd:e0:7b:2a:84:c3:4b:7f:42:eb:
93:a1:5c:c5:34:0b:e3:42:d0:2c:e2:8f:80:f3:a7:7f:7c:63:
af:3c:75:df:36:77:e9:fc:f2:87:f0:1e:1c:38:c6:0e:4a:df:
3d:ff:c6:e6:5f:84:8e:d6:3e:f3:5b:f3:a3:9a:c5:88:a1:c4:
15:50:bf:11:aa:e8:82:a1:0c:94:5a:13:28:61:57:86:61:51:
21:7e:13:2d:cf:1e:55:87:ba:14:fc:30:b9:68:39:88:0f:50:
e7:f3:2c:0c:ef:b2:dc:40:db:fa:76:87:40:f9:44:0c:a0:27:
52:87:f5:bb:f2:e5:b2:1c:23:1d:b7:8f:cb:2d:83:55:d5:d2:
a3:27:24:5e:7e:f6:88:cd:70:52:d1:6d:39:62:bb:97:e5:a0:
06:d0:21:b7:9c:22:0a:92:dc:b2:31:8e:08:62:52:7e:1d:10:
f4:b9:e8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:49 2025 by rpki-client