Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1a6a88d8-6977-3d13-bdb7-7b74335d6c1d.roa
File: 1a6a88d8-6977-3d13-bdb7-7b74335d6c1d.roa (raw, json)
Hash identifier: wZqMNIWR5BDJMQ7D3IgOX9QK5ZFnFZPMauaNzcV3u8Y=
Subject key identifier: DC:6F:44:DA:EA:AB:80:A2:2D:D6:83:C1:DC:38:71:04:8A:81:9B:41
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285848DA70F6354A6C7E3125D80BC0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1a6a88d8-6977-3d13-bdb7-7b74335d6c1d.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 397422
IP address blocks: 209.237.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f6:35:4a:6c:7e:31:25:d8:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=b8ae79b3-515a-462a-8bd6-fd2485fbc540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:80:83:7e:34:bb:af:fc:9d:e5:95:55:81:e4:
1f:61:43:a8:80:87:90:24:45:04:6a:8b:60:c2:b0:
53:92:8c:c4:ee:09:db:dc:e9:2a:8b:f9:8a:a6:2c:
e7:ed:24:26:07:ac:b2:ce:5d:cb:b5:39:21:d2:d9:
6c:28:f8:06:00:bf:1d:0f:09:17:04:63:0a:26:6a:
18:dc:69:7b:79:ce:47:f8:18:58:74:99:2a:10:5e:
10:0e:79:c8:2c:e5:17:d9:21:4e:ee:ab:2f:f1:7f:
11:66:c0:1c:3e:05:4d:f8:63:2a:81:b1:69:b6:dd:
20:0f:a4:7a:26:b7:13:dd:b1:e5:12:a4:c4:51:c2:
02:a8:ab:19:7d:62:e1:9e:a1:85:64:27:a4:67:80:
fc:63:29:db:1f:0d:70:3a:2d:87:a9:02:36:29:21:
20:b1:19:65:de:04:94:4c:ea:0a:6d:06:aa:75:f4:
43:87:44:93:d4:81:d0:ab:ce:42:6f:67:d3:42:19:
76:d2:b4:cc:de:59:af:c9:70:59:ad:d3:a1:92:7b:
d7:e8:41:eb:51:f0:98:76:10:6f:62:6f:eb:89:26:
60:6b:cc:a6:54:fa:36:4f:1d:27:89:0b:f8:23:1d:
c1:31:a4:a8:29:aa:5f:a0:b0:34:bd:29:44:af:88:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6F:44:DA:EA:AB:80:A2:2D:D6:83:C1:DC:38:71:04:8A:81:9B:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1a6a88d8-6977-3d13-bdb7-7b74335d6c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:0f:11:d3:d8:20:ba:0e:e1:7e:2b:e3:66:3e:23:28:a0:b9:
83:10:06:ef:82:79:f2:fa:e1:e8:86:c2:1f:f8:07:fb:65:97:
f4:c5:d7:11:b2:84:01:42:13:2f:01:0a:1f:f7:6b:71:21:b1:
e9:c5:16:eb:ed:33:06:a0:d4:16:79:eb:2e:4c:46:69:cc:e8:
26:8c:10:97:d1:b5:c2:31:ff:50:22:fc:94:30:12:13:84:41:
19:97:74:b4:21:64:6e:25:36:b5:be:c3:7e:af:94:e8:41:05:
c4:96:b9:a4:c7:b0:c0:b0:b8:62:58:70:2f:4c:dd:0a:c5:50:
91:13:72:9a:da:66:bf:00:37:03:7d:af:58:23:e8:8d:c6:04:
7b:fa:7e:4b:54:cc:06:92:56:81:1f:56:cd:12:d0:e6:8e:8c:
17:b7:6a:8b:ae:d2:1c:ad:ca:4e:5f:4d:15:c5:fd:de:f4:37:
70:63:dc:e0:df:4d:e4:3a:fb:ac:2c:01:99:07:2b:bb:45:6d:
12:cf:36:c3:92:87:6e:f3:97:32:ff:2b:fa:1c:2d:2b:18:af:
bd:3d:c5:03:e8:c8:1c:6c:75:de:59:09:c4:74:6e:65:df:f1:
4d:08:48:12:59:20:10:d0:96:62:0d:1e:92:cc:40:8a:08:4c:
0a:58:e7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:12:03 2025 by rpki-client