Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa
File: 40385235-f792-3e3f-8a68-b1affa65f084.roa (raw, json)
Hash identifier: iVBGNFfbkd2dJh/L3uTN/txxmyC+E9X2J2aVm/6Tcss=
Subject key identifier: 6E:18:0D:5C:AB:77:2E:AA:DC:4F:D1:7D:7A:84:67:BC:45:43:A9:25
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285848DA70F5CB0A35A9649E74C800
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 397422
IP address blocks: 209.237.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f5:cb:0a:35:a9:64:9e:74:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=814ee7fe-ea4f-4493-80b7-8e4978392adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:6d:77:71:d9:b1:0b:95:e2:03:cc:29:39:
e1:73:87:14:73:ac:5b:02:50:46:4c:b7:62:20:1e:
75:c8:4b:6c:89:4d:aa:73:f9:b7:0e:67:35:a0:f6:
b8:c7:7c:21:7b:80:ea:96:fd:39:6f:1c:f4:39:42:
ae:07:87:bf:76:74:6b:f2:5f:4d:78:43:b1:78:a4:
15:5e:fb:f5:b3:80:be:10:48:bd:03:5a:24:61:59:
9e:e5:ce:f1:c4:02:a7:5e:76:73:c2:c2:cc:a0:22:
c6:36:e2:04:19:99:4d:1b:c8:38:d5:33:42:00:4b:
5c:e2:44:7b:b1:48:b2:0e:8b:3f:f4:c1:9c:62:9a:
54:63:52:69:92:aa:b9:ad:a4:93:7c:3f:f5:51:b8:
43:f1:b9:bb:31:d9:18:69:1b:8f:64:db:45:62:74:
d5:51:f4:56:61:89:43:86:40:b6:eb:54:d7:ae:ef:
8e:db:c6:e0:66:5f:51:e1:b0:f1:cf:0b:a9:2f:6b:
86:32:dc:8d:26:9d:30:aa:b3:df:e2:a4:a1:cd:0f:
0d:57:ce:ca:3c:df:b9:0a:eb:3c:94:74:4f:d6:a6:
2a:46:eb:05:71:e2:61:3d:f0:1b:83:1b:4d:ce:60:
05:d6:0f:09:be:39:ed:fd:41:28:b5:70:4c:15:b6:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:18:0D:5C:AB:77:2E:AA:DC:4F:D1:7D:7A:84:67:BC:45:43:A9:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:e9:a9:a8:c3:8d:70:42:67:5e:66:aa:af:61:81:41:3a:c9:
7b:f8:05:a7:bd:bb:40:f5:64:fb:b9:ab:e9:6c:27:0a:62:02:
df:d6:95:fe:ed:87:5c:33:6c:76:e9:37:92:22:60:f9:13:c7:
c6:6d:0d:3b:d7:24:ba:b5:f4:98:68:f7:7f:b3:a4:44:58:f8:
22:bf:3d:04:b5:7e:e4:e2:3a:32:56:2a:ba:1b:97:15:4f:cb:
e5:3a:36:ea:84:26:6e:35:b9:34:4c:db:78:62:85:27:43:dc:
63:e2:80:26:46:75:52:f1:63:54:e4:bc:98:51:fd:61:23:e7:
5e:74:ed:3e:ec:0d:d6:47:68:be:9c:2d:58:21:83:bd:3e:33:
08:34:82:81:6c:f8:ee:47:b4:cb:9b:7b:23:b0:50:d3:18:ba:
24:15:25:36:88:c4:8a:e8:04:c9:2d:e4:1d:70:08:59:8f:0d:
0b:f5:da:95:3d:92:cc:f9:65:56:78:bf:c1:9e:f7:ec:b3:55:
39:18:96:18:50:b3:ef:09:da:63:59:c6:28:70:2c:0c:0e:dc:
ac:c1:d8:c0:b6:d2:29:19:5b:05:fe:e5:2a:b7:3b:dc:fb:58:
aa:fe:e1:2b:0c:5b:8c:28:fa:10:5a:f0:19:b2:ed:60:d0:bb:
5a:7e:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:39:47 2025 by rpki-client