Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d8dc91b3-30db-30c3-9cfa-d15f204b5bf6.roa
File: d8dc91b3-30db-30c3-9cfa-d15f204b5bf6.roa (raw, json)
Hash identifier: my3bDf+R5oeWPf9QbwkfbAXqVe8xIFo1AsDo4avRfbQ=
Subject key identifier: 20:69:A2:02:78:08:3B:00:42:AF:25:8A:72:A6:F6:2F:BC:E4:A3:A2
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848C2B64002D748599A7B6B3A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d8dc91b3-30db-30c3-9cfa-d15f204b5bf6.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 5650
IP address blocks: 209.73.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:40:02:d7:48:59:9a:7b:6b:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=5222bc45-099e-4635-936f-b0516e8f1e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:a8:4c:98:fd:c3:66:cf:64:ff:fa:ac:9a:
19:f0:15:63:69:e1:2a:48:b2:a0:81:3e:e4:08:38:
f0:c2:83:fa:49:f8:8d:42:05:73:49:7c:a6:aa:56:
7c:01:7a:28:c4:eb:4f:b8:a4:9d:59:2c:7b:b9:d0:
7e:e0:aa:83:f6:f6:a6:bc:3a:0e:6d:50:af:d5:39:
19:bf:56:8a:12:1e:75:a8:88:a9:ad:92:51:44:63:
ee:d3:94:19:40:21:fb:37:be:55:22:c7:d7:ae:43:
d0:ef:02:e6:df:0a:a0:50:bd:28:f8:9a:d0:ad:9c:
c9:0c:3a:9e:09:44:85:1e:cd:79:7f:f6:0f:42:ef:
cb:07:07:59:94:3c:73:7d:19:5b:4f:17:39:38:aa:
b2:10:b1:c4:21:57:84:40:b2:b8:79:89:a0:db:10:
7c:f3:ba:14:33:29:71:f4:c2:a7:52:bb:87:ed:96:
bb:85:03:04:46:f1:00:ce:a6:01:88:cc:27:8d:46:
59:ed:e0:55:eb:6d:3f:28:aa:ef:b1:c8:d9:ef:f9:
e6:e7:c7:b0:12:1e:d8:c7:81:89:99:eb:fe:53:82:
74:2c:4d:1f:f1:d6:0e:0e:87:42:93:f7:90:32:b6:
12:74:f2:d3:14:99:76:63:b6:85:13:9f:04:20:5c:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:69:A2:02:78:08:3B:00:42:AF:25:8A:72:A6:F6:2F:BC:E4:A3:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d8dc91b3-30db-30c3-9cfa-d15f204b5bf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
209.73.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:d8:b5:20:20:a3:1c:cf:b2:eb:b5:80:b0:8d:e4:d1:47:ab:
91:67:56:f8:6c:55:29:d5:a1:53:c3:6d:91:3d:b8:7d:32:db:
4c:d3:ca:7d:b8:69:29:44:e0:ea:50:8f:82:e7:da:66:34:7b:
c6:2b:fa:79:e7:ab:02:a2:5d:a6:60:f3:f7:87:f6:aa:3c:e3:
27:ad:f6:86:63:5e:81:df:2b:3a:94:08:5c:ff:98:b3:bc:d5:
82:08:a3:ca:62:9a:77:c2:6f:7c:42:aa:73:f2:8a:e8:05:b1:
66:41:28:cf:d5:5d:47:05:92:4c:bc:8c:4b:e4:dd:2a:93:8a:
e0:0d:29:a5:b6:63:a4:e2:dc:45:8b:cd:87:ef:ea:6f:24:d5:
ff:8c:7b:db:b7:67:3a:6b:2f:2e:ab:00:38:73:41:dc:87:64:
4f:75:3f:b2:aa:e5:3d:66:c9:87:2b:1e:15:04:32:7a:f9:e3:
7b:ef:a4:3f:92:b0:d4:c2:d7:ea:66:54:10:4f:3d:f4:00:66:
2b:b3:15:4e:8f:d4:9a:9b:7e:77:8e:a1:08:61:6c:fa:4c:0a:
ef:3f:89:5a:67:13:85:3a:c8:34:53:5b:09:19:3a:07:2a:11:
ba:48:7e:f5:97:38:2a:49:be:76:34:33:d7:4c:73:b0:92:56:
88:7f:ea:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:04:25 2025 by rpki-client