Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/9f872cec-cb89-3d99-a275-e385fd188443.roa
File: 9f872cec-cb89-3d99-a275-e385fd188443.roa (raw, json)
Hash identifier: S1oDboT3Co8lrOwxHN05IIkviXUi20nFjkj2H7pRfWY=
Subject key identifier: 7B:E1:A4:7A:8C:DC:D7:92:20:03:A5:96:AA:67:25:BB:3F:F5:E8:5E
Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial: 010D0C9F43285849244E685A8F7273B47D36C880
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/9f872cec-cb89-3d99-a275-e385fd188443.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 2572
IP address blocks: 209.106.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:68:5a:8f:72:73:b4:7d:36:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=a066ae3a-8c60-47cc-93c2-9c31174e0509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:46:7a:80:a8:9a:5a:89:b7:e8:6f:3d:6c:8e:
d4:09:08:35:69:0f:e9:f2:f2:eb:66:67:67:76:bf:
f5:21:a4:36:36:ad:e5:a5:51:61:73:fd:3b:14:1f:
24:5c:35:ef:a3:c7:51:a6:80:f8:3d:51:e1:da:8e:
b2:9f:ca:48:00:1a:aa:bb:e7:79:3c:85:72:62:10:
7a:40:34:b3:76:c7:5e:54:10:3b:f2:52:5a:7e:6c:
a0:32:05:9e:4b:89:67:4f:bf:a3:f0:8b:26:dd:5d:
ab:36:f9:99:f8:33:41:2a:21:d1:60:12:fb:c1:48:
a6:5a:eb:68:af:01:fc:c8:0f:72:a0:33:b5:c0:c7:
a1:01:94:4d:dc:de:21:76:b9:cd:0a:ae:9b:28:f7:
ff:2b:a5:1d:a4:1f:9a:48:b8:f9:ee:b7:3f:02:a4:
b2:fb:6c:0d:17:c2:09:7a:8e:1e:2a:ea:c5:f3:27:
1d:ef:70:17:02:e9:bb:12:4b:10:aa:af:7d:bf:63:
2c:d4:76:5c:f3:28:2c:01:10:3b:77:5c:a1:8c:2a:
b7:28:6b:64:69:04:38:1f:f7:f7:35:6e:49:a1:3e:
9b:a0:7c:cc:e0:00:4c:d1:22:ef:af:18:9c:e6:6c:
06:42:f9:4b:f3:85:f6:51:f5:75:96:36:30:32:48:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E1:A4:7A:8C:DC:D7:92:20:03:A5:96:AA:67:25:BB:3F:F5:E8:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/9f872cec-cb89-3d99-a275-e385fd188443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
X509v3 Authority Key Identifier:
keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.106.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:2f:8c:a3:c8:ac:48:a1:d4:15:6a:90:da:73:f5:ab:f3:60:
95:76:a4:c0:64:a5:15:cf:37:f2:ed:f4:3e:24:e1:25:36:3b:
aa:3c:62:fa:27:8a:02:31:b6:53:0f:fe:9a:17:94:c4:81:3d:
c3:d1:03:cd:6a:67:2c:6f:96:c2:81:c2:a2:0a:da:c1:03:ce:
b4:f0:83:c3:1f:96:35:38:d5:4e:55:c7:49:8f:09:14:90:df:
d4:3c:7d:ce:e4:74:30:94:13:b4:62:c6:5d:3b:70:fc:fd:d0:
03:72:36:19:2d:29:33:15:14:de:11:e5:3d:77:eb:33:98:77:
39:d4:62:07:60:fb:69:60:e0:7c:67:7d:03:39:e8:f0:11:f6:
4d:9e:84:f3:2d:e4:6d:98:cb:e3:f8:3b:e9:d6:9b:e5:73:a3:
c9:5e:01:fd:86:2d:4a:fd:5e:c2:c1:3d:4f:5f:09:45:52:36:
53:c8:73:58:b4:99:1d:5f:ea:0b:34:55:ca:71:fe:0a:d1:e9:
db:bf:d6:86:62:b8:98:ae:ca:6c:f4:71:fe:1a:a3:07:c2:f4:
75:16:32:34:6d:0d:0d:0e:ce:ee:70:1b:c9:f0:ce:a8:8f:b5:
bd:0f:e2:53:a3:6b:cb:07:e3:5c:06:91:7a:bf:c6:6b:f7:ea:
43:73:96:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:16 2025 by rpki-client