Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa
File: db8f199a-62c8-36d3-a41d-64390cd86118.roa (raw, json)
Hash identifier: uf6j4xs4mZiKgf675ooGwE7AHl49DTGy6OE/YZAzvuY=
Subject key identifier: 9C:3C:E2:25:A8:DA:45:29:F4:D4:FB:9A:0C:F1:97:4F:BD:18:8F:E5
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285848A565F6088854023B6E2AA300
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa
Signing time: Fri 24 Jan 2025 02:00:39 +0000
ROA not before: Fri 24 Jan 2025 02:00:39 +0000
ROA not after: Thu 24 Apr 2025 01:00:39 +0000
asID: 11233
IP address blocks: 209.237.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a5:65:f6:08:88:54:02:3b:6e:2a:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Jan 24 02:00:39 2025 GMT
Not After : Apr 24 01:00:39 2025 GMT
Subject: CN=fe8b4368-bb38-4de6-adee-3bced2855a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:9a:0f:a1:50:ce:f9:05:f0:9d:36:2c:85:
0d:4d:2b:0d:56:c0:bc:26:19:a1:21:ea:37:bc:aa:
a7:6e:49:bb:91:cd:ec:92:2d:f4:b4:57:a9:7d:df:
e2:6a:ec:35:00:d2:72:b8:39:5d:27:3e:23:a2:77:
fa:5e:b8:17:18:16:ed:63:1b:a6:e2:7b:c8:2f:7b:
76:29:6e:c9:2d:3a:fe:7b:45:77:0b:8e:f8:84:da:
a8:c2:b7:b7:be:15:a2:83:c7:56:53:7c:57:4d:b9:
f0:58:58:01:95:35:6e:62:1d:5f:c2:68:07:8b:91:
4b:e8:52:5d:04:92:f4:91:6d:df:e6:eb:ff:1d:97:
c4:0b:af:fa:3a:23:eb:9f:33:8a:be:52:29:4a:02:
7b:41:e0:e6:4f:eb:f7:e4:1d:71:8f:97:17:71:d4:
6b:dd:68:45:6c:65:75:b4:dc:17:6a:6e:71:48:3a:
8e:e6:6b:6d:96:26:f7:a8:c4:27:0e:d6:92:b2:0e:
b8:d3:f3:26:b3:cc:4c:e1:8d:16:e5:56:1d:39:83:
be:58:b2:1c:cc:b6:df:6d:00:2c:e8:07:5e:70:a8:
4f:a1:14:25:30:63:5c:be:f2:d6:7c:6f:7a:4a:b4:
f8:ac:f4:a9:11:f3:c4:7c:77:72:a0:db:b2:6b:c0:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3C:E2:25:A8:DA:45:29:F4:D4:FB:9A:0C:F1:97:4F:BD:18:8F:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:3f:49:88:28:63:50:9e:f7:55:90:65:b4:82:96:78:0c:ac:
12:ca:3b:d9:6c:c8:5f:e9:ab:19:bd:25:d0:8d:14:34:0f:48:
a2:f7:29:43:e7:66:18:52:28:21:d1:51:a2:f3:a2:77:04:d6:
b5:7d:14:79:2d:36:af:9e:26:71:36:94:3d:f3:4a:39:5e:7c:
5d:1d:a8:ee:71:45:59:3e:4e:8b:c6:34:9b:fb:66:2c:4f:dd:
df:ee:9e:10:77:92:6f:7d:98:10:d5:f0:67:a0:65:f1:be:f6:
c4:cc:f0:ed:b2:6b:56:38:45:95:7e:cc:92:44:f2:dd:84:9e:
ff:6b:43:5f:4b:ac:99:5b:40:2e:e9:b4:43:99:cd:ed:0a:00:
43:34:7a:2c:d2:ac:cd:d0:0f:39:95:22:f0:8b:d3:5b:f9:3f:
d7:a5:91:54:40:09:fc:e1:8e:81:3b:85:a3:03:a0:a7:24:24:
37:62:a3:73:13:2e:22:97:07:e9:0d:fa:f9:ee:9c:90:c2:df:
6c:52:29:59:bb:f4:b8:df:7c:49:e6:68:05:8f:91:e8:b6:e6:
a0:3a:4b:9b:b1:e1:ac:f0:4c:a0:d6:d8:b3:8f:90:7e:1e:09:
f7:ee:ce:32:62:9c:e1:a6:7f:25:04:be:35:91:b4:a1:31:da:
44:d7:e5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:13:20 2025 by rpki-client