Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/866e5acf-ad02-3689-8207-fee6bcc3ab49.roa
File: 866e5acf-ad02-3689-8207-fee6bcc3ab49.roa (raw, json)
Hash identifier: vtiUxwTBY9Y630xhA/sFdwG/t1V4cGb78JGX2cVsjUw=
Subject key identifier: CC:C5:1E:23:34:A1:E7:39:33:78:D1:02:D6:8B:37:C2:44:67:53:A1
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285848A565F61DAA3C75FB0DAEFF20
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/866e5acf-ad02-3689-8207-fee6bcc3ab49.roa
Signing time: Fri 24 Jan 2025 02:00:39 +0000
ROA not before: Fri 24 Jan 2025 02:00:39 +0000
ROA not after: Thu 24 Apr 2025 01:00:39 +0000
asID: 11233
IP address blocks: 209.237.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a5:65:f6:1d:aa:3c:75:fb:0d:ae:ff:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Jan 24 02:00:39 2025 GMT
Not After : Apr 24 01:00:39 2025 GMT
Subject: CN=56b722e3-2871-4079-9f33-07564a95c225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:8a:e0:9e:3f:70:e7:17:da:f7:08:1a:4b:
e7:de:64:f8:eb:33:76:ed:d3:28:f5:fd:7b:3b:3f:
f5:ae:50:74:dd:81:e9:cd:01:92:0b:51:d6:6d:06:
c1:0a:4b:5f:5d:98:14:4d:aa:45:5c:ac:de:4f:f3:
35:73:c2:1d:34:b7:6b:01:d0:fd:86:69:6f:1e:62:
b1:9a:b9:cf:d8:cb:8f:d1:29:e8:49:79:c2:fa:27:
22:90:95:ed:ed:92:92:08:3b:ca:59:d2:aa:66:56:
99:55:cb:b7:d4:74:b9:7e:10:ba:aa:90:6e:c5:e4:
f3:79:ac:ac:21:9b:b5:7b:73:89:07:f6:1c:d1:78:
c4:29:e0:85:94:13:c9:2b:f1:03:71:4c:38:33:74:
04:b1:27:f0:b5:5e:23:10:7c:06:5a:19:af:8a:eb:
68:5d:f9:b0:56:bb:e0:22:7a:54:74:65:ab:32:f5:
e6:9c:3a:09:6f:e7:d6:82:95:2b:c4:7f:90:d6:a2:
65:e9:29:e6:02:af:ec:c4:c8:8d:0c:67:b7:88:4b:
de:fa:a7:e6:08:24:1b:37:ee:84:7a:2d:f6:84:1a:
2a:b8:56:19:25:45:be:c7:53:eb:17:3c:af:58:71:
df:6b:b1:f5:7c:92:c0:b3:cc:0b:82:f6:fe:36:c5:
61:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C5:1E:23:34:A1:E7:39:33:78:D1:02:D6:8B:37:C2:44:67:53:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/866e5acf-ad02-3689-8207-fee6bcc3ab49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:70:a9:09:13:5c:d4:c2:f4:0c:b8:98:06:c4:db:8f:a6:4f:
94:dc:c9:6e:26:83:d6:75:81:2e:fd:f3:64:9f:3f:99:8d:db:
d2:d1:2e:71:76:41:7d:b1:80:09:03:ef:53:fd:58:f2:92:cf:
80:15:06:ca:3d:c7:68:3f:8c:fa:82:c3:d8:3a:db:31:ef:ab:
69:a7:4b:db:38:b6:7f:f1:7b:f0:5c:2d:77:00:c1:9e:e0:e1:
0a:c2:26:ad:ae:e7:07:b0:fb:e7:e5:a7:4d:90:48:05:09:43:
d7:b0:de:89:cc:54:ae:3f:77:3e:a8:30:1c:e9:50:2f:b9:99:
eb:84:e3:1a:ae:2c:44:54:c6:47:3a:8e:14:5b:25:03:e4:df:
11:62:f8:f2:8d:72:02:e1:88:e8:da:88:8d:b9:c4:61:92:ec:
f4:ed:f3:75:cd:ac:4a:cb:ad:c9:b2:80:1b:a7:fe:d5:ad:36:
8f:d0:2e:9e:c8:34:1d:b1:77:3c:8d:ed:7a:69:26:bc:5e:0d:
63:e8:70:a8:74:10:af:db:80:18:19:ba:0e:32:71:9a:17:57:
3e:c1:dd:13:e9:45:cd:02:94:0a:83:fe:07:63:99:38:9c:9c:
c2:1f:4e:80:9a:89:f2:d8:a4:83:cc:6b:5f:9b:b1:5c:f0:fe:
1f:1d:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:44:33 2025 by rpki-client