Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/62f5aa42-c4c2-35b5-b2ae-341f1752cc1c.roa
File: 62f5aa42-c4c2-35b5-b2ae-341f1752cc1c.roa (raw, json)
Hash identifier: 1Q7EvjuFSjwp5LyR7Ycxi2Ioj8efwuPiEXgibuthj8I=
Subject key identifier: 96:39:BE:DD:14:12:EF:77:D7:A2:45:C7:37:52:07:0C:9A:DF:3F:82
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F432858488815ECA4E5E94A5341ED0100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/62f5aa42-c4c2-35b5-b2ae-341f1752cc1c.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 7018
IP address blocks: 209.251.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:ec:a4:e5:e9:4a:53:41:ed:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=412a9093-ce6f-435a-aa83-d539c18b45f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:2a:31:7a:c4:38:f2:ae:90:16:84:5a:0d:
18:6b:37:bc:9a:d2:0a:ee:41:c3:4d:1d:35:e3:12:
58:88:b2:93:7f:4c:d4:37:94:42:de:7a:5e:f2:75:
bb:1a:e4:cc:1e:86:37:86:fa:87:ec:41:0d:2c:4a:
64:02:93:d9:c1:4c:2a:a9:62:4e:14:e3:ce:4c:05:
68:35:f9:c9:82:c2:26:93:77:a1:10:e0:e8:0d:fb:
7f:35:da:8e:14:8d:11:e0:3c:8f:75:f9:7d:73:2d:
05:c8:34:25:6c:46:8f:a2:22:8d:b8:07:f6:6e:d0:
b9:dd:46:67:f9:f0:17:c1:ca:f1:7d:95:fd:be:03:
c3:3a:97:48:63:a5:a8:06:d2:54:4d:2a:7d:99:98:
47:5c:7f:ca:33:27:36:d2:25:77:ed:a1:56:36:6a:
a4:38:cb:2a:7e:d6:3f:b4:6d:21:e4:6e:4a:c5:31:
7d:a3:a2:2f:42:58:f6:e7:1c:21:89:4c:31:97:79:
af:e3:5e:ba:0d:b7:77:ed:30:df:95:87:f4:e9:8d:
1e:8a:bd:b5:31:35:fc:0b:ca:64:15:0f:ef:b0:1a:
5b:5e:b0:29:bf:a6:b9:f4:bb:2f:9b:70:59:fa:16:
ca:cf:25:0b:83:4e:dd:2e:eb:ad:d8:a2:93:f6:3b:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:39:BE:DD:14:12:EF:77:D7:A2:45:C7:37:52:07:0C:9A:DF:3F:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/62f5aa42-c4c2-35b5-b2ae-341f1752cc1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
209.251.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:56:09:27:a4:35:bd:6e:b0:d5:14:6c:69:8f:65:af:ff:62:
5f:4c:a2:72:58:ef:83:50:0f:7d:09:3c:9d:ed:7e:1e:51:24:
4b:f2:26:fd:fc:28:f2:c3:b8:d2:06:eb:0d:c4:b1:f4:2f:e6:
44:03:58:ae:92:f4:1c:0c:86:31:fd:33:f9:20:46:a8:89:44:
73:be:07:41:58:45:7d:21:b5:1b:a9:7d:2c:73:f7:5d:ba:88:
db:05:32:05:2b:8e:72:8f:48:0f:5b:6f:ba:ac:03:71:a9:2e:
96:5a:bd:51:2d:d2:85:c3:3b:7d:e7:0e:1c:f9:6e:e9:28:9a:
7b:e7:6c:06:29:b0:71:02:c5:fe:39:ed:76:01:eb:4a:79:07:
ac:e6:1e:9b:31:e9:78:0f:c8:82:15:73:18:d7:12:20:35:67:
92:03:00:ab:ec:45:1c:85:e0:1b:d9:4a:81:71:84:47:76:c5:
7f:b8:5a:3b:82:ef:66:bd:dc:2b:5b:96:1b:b3:7f:aa:b3:dc:
f3:00:63:83:70:c8:5f:aa:73:5c:7b:8c:5e:7b:4a:df:d1:45:
9e:69:d2:90:56:16:e6:c5:46:16:5d:07:e8:7d:bf:06:39:ba:
cc:fc:94:1c:06:8c:13:02:95:93:1e:a7:73:7b:19:1e:60:89:
bf:70:d0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:43:23 2025 by rpki-client