Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/45f97fe6-7abf-3e12-b4e5-215c491a44d9.roa
File: 45f97fe6-7abf-3e12-b4e5-215c491a44d9.roa (raw, json)
Hash identifier: MUDoXP6AwGxORWTF1oHwl4AehBkhxo5xbXy+gKJsOQE=
Subject key identifier: 80:A4:BF:3E:E4:82:8C:15:4A:1D:4A:59:FB:BE:FF:F5:47:75:F4:E2
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285848D2113DD1E713A932C5C85320
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/45f97fe6-7abf-3e12-b4e5-215c491a44d9.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 13692
IP address blocks: 209.237.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:3d:d1:e7:13:a9:32:c5:c8:53:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=fb3f584f-8546-4e4d-bd0f-6a4c4d506683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:7e:bd:33:20:f2:66:35:2f:30:68:51:65:
fc:06:ce:97:d8:27:31:82:b9:bb:dc:58:12:c5:7e:
dd:5e:52:1a:ae:81:27:8b:8e:1a:18:e2:51:7f:8d:
4c:5e:fa:d7:59:b2:b2:47:75:c3:b1:e9:1b:a0:dd:
93:2d:1c:2b:5b:4c:54:ea:61:04:d3:50:25:d4:2e:
08:81:55:06:18:0b:72:6d:43:08:73:6d:e3:f3:4d:
0c:db:da:b9:82:30:b9:b7:c0:6b:ed:3a:18:9d:5b:
fe:ac:ce:34:3f:63:c7:b6:d9:1b:2f:85:a6:3d:f9:
7e:30:0e:db:64:db:a8:89:e3:c0:7e:a1:61:5d:fd:
78:9c:1a:7f:27:d2:19:9d:50:f6:a5:bd:8d:ea:ae:
3c:da:55:e2:a4:af:de:88:6a:de:87:90:29:0e:6f:
ff:d4:15:ef:05:7c:f7:d4:cd:d6:44:43:88:fe:dc:
bd:39:e5:4d:03:c2:91:ba:cd:97:10:8b:d5:86:74:
dd:8c:be:72:a0:e9:9b:da:62:0b:b1:21:cb:4b:79:
a4:8c:6c:a9:13:cc:5f:21:0e:51:ef:b3:45:47:2b:
14:9f:f7:70:a8:14:e7:59:95:df:29:67:aa:e5:5c:
34:70:d8:5d:9e:46:d5:b4:d8:48:5e:c1:c4:7e:29:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A4:BF:3E:E4:82:8C:15:4A:1D:4A:59:FB:BE:FF:F5:47:75:F4:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/45f97fe6-7abf-3e12-b4e5-215c491a44d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.80.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:89:89:2f:3b:8e:28:d0:ca:5c:4a:3b:1a:4e:3c:30:82:fc:
bc:c3:90:88:5a:28:92:c7:56:12:55:a0:61:76:3e:c2:1e:26:
b6:ef:01:58:98:e0:2a:df:84:ab:d2:c5:f8:90:45:59:57:dd:
68:df:5a:a8:b3:0d:18:fb:97:c8:d2:7a:1c:a1:55:f5:81:3a:
70:cd:42:10:43:9c:39:f2:f6:87:2d:4f:ae:be:2d:0a:67:9b:
5e:4f:e5:76:f7:2d:65:68:f7:86:7e:a5:ec:8a:51:6b:13:21:
46:83:f6:28:6f:b2:0b:26:29:76:04:eb:d7:1b:60:8e:bf:20:
12:29:f6:68:2b:35:61:ca:56:7f:10:4c:b9:71:cb:d7:c3:26:
24:fe:0c:9b:e5:23:76:d5:62:87:4d:b8:0c:9c:e5:dd:08:03:
08:5d:22:ce:63:79:65:d1:0b:0d:f1:86:78:5e:f9:64:fa:b8:
5d:5a:26:6a:ab:a0:1d:50:74:f5:4d:b9:91:42:ed:c0:14:58:
fa:6f:f3:d3:a9:14:b8:12:b5:89:ff:da:e7:bd:0a:74:cb:b6:
b8:79:c5:69:b1:8e:af:d4:73:c5:92:e3:51:c3:ca:de:28:00:
1d:0a:54:57:68:fc:88:0d:dd:a7:aa:c3:2d:53:71:85:5e:a4:
be:0d:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:12:39 2025 by rpki-client