Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ffafbaae-e4fd-3134-b97f-3f16a9da02b8.roa
File: ffafbaae-e4fd-3134-b97f-3f16a9da02b8.roa (raw, json)
Hash identifier: oTkavne3ItjjrrufQJeKvBa8N7xhIqRB0wYx+8HUlpY=
Subject key identifier: 05:BF:AE:F2:8A:4C:FB:CA:22:7D:D6:2E:9A:A3:63:EA:74:00:D1:1F
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F432858491941849350343BDBDED27280
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ffafbaae-e4fd-3134-b97f-3f16a9da02b8.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 19955
IP address blocks: 209.221.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:84:93:50:34:3b:db:de:d2:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=d505371e-3fe5-4e43-b3f2-5179295ab07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:64:7d:54:b3:ba:92:88:82:7c:cc:33:3e:
f6:4a:43:a2:4e:92:0d:f8:b5:eb:9e:f2:3a:00:14:
d1:46:7e:0d:a2:61:84:a6:a0:21:eb:a4:c1:fe:62:
23:16:d6:21:28:d1:83:f3:c2:3e:4b:96:55:ce:94:
01:ef:75:b7:6f:2d:57:21:be:d4:31:9b:17:f6:2b:
55:c1:55:74:e2:0a:b8:34:93:23:f9:4a:28:cb:31:
6b:9a:64:7f:19:4d:a2:75:86:53:55:fb:64:aa:a4:
c2:83:39:6a:8b:66:26:64:e0:2d:a8:4e:cf:7a:8b:
e6:5f:32:c2:ff:ac:de:ae:99:ff:38:31:63:72:3b:
df:f5:db:d7:af:52:fa:a8:68:d3:eb:53:f1:98:74:
3b:54:87:bd:64:48:23:cf:dc:7b:cd:95:13:79:06:
9f:80:4d:98:93:ab:a0:41:9c:d6:26:ff:35:2f:fc:
aa:5a:a0:f2:fb:51:cd:70:8e:f6:34:ad:4a:0d:4b:
99:b1:de:f2:7c:fa:a5:79:0c:0a:27:e7:da:9e:01:
3d:b7:1d:b2:58:9f:9f:51:e4:ea:68:d3:d4:dc:1c:
6d:60:7d:93:bf:91:52:1b:e8:0f:f5:c0:a3:6c:ce:
85:eb:b9:e4:49:c2:46:ca:ae:6a:9d:40:11:10:38:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BF:AE:F2:8A:4C:FB:CA:22:7D:D6:2E:9A:A3:63:EA:74:00:D1:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ffafbaae-e4fd-3134-b97f-3f16a9da02b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.221.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:46:5a:67:c6:09:71:a7:e9:eb:c0:f2:3f:f8:27:b7:90:f5:
02:63:96:d0:9c:1f:1e:39:8a:7f:51:6f:06:4c:c8:1e:bb:73:
af:35:6e:08:14:64:6e:de:0a:b5:4e:0b:0b:d8:26:86:cc:91:
7e:0a:08:a0:cc:67:02:8a:c5:2d:02:22:eb:a0:51:bd:04:fd:
34:9f:a4:af:75:56:bf:9d:8e:d9:7a:4c:67:95:ec:cc:f6:64:
62:a1:1a:b4:2d:99:f2:23:f1:b8:2d:1c:cf:76:d8:4a:d6:9f:
2e:17:12:c9:92:be:2c:45:fc:0a:83:77:44:38:ef:ab:bf:5f:
ca:fc:54:73:ff:8a:6e:f2:b0:e1:54:4b:0a:f9:40:e4:69:cd:
c5:3a:09:41:7f:4b:e5:4c:d8:96:f9:20:f1:e9:69:52:0d:7b:
28:92:b6:83:ef:bb:c3:47:04:5a:1b:c3:13:5d:50:5f:35:f6:
1c:1f:75:04:22:4f:dd:e6:f8:4c:c4:f5:fb:ac:78:fa:ee:f4:
1a:1a:5f:fb:5a:a5:c8:c7:6d:95:c2:12:52:cc:0b:97:2d:54:
79:54:39:0e:36:7c:2a:14:26:de:d2:ee:3a:b9:53:1c:c8:36:
e1:00:01:55:65:ac:e9:fb:e9:23:0f:fa:e7:cb:d3:5a:94:6d:
7c:00:d0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:37:06 2025 by rpki-client