Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa
File: 1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa (raw, json)
Hash identifier: 6JpJR0gYZVcmwO6rxUWFZYsQ1a/Q4s8FYccDknedaoQ=
Subject key identifier: E4:19:1A:8A:EF:A6:6B:A4:AB:AC:8C:D5:59:5E:A6:6C:76:C2:DB:D9
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848504031F28B88E3EDE6B21B00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa
Signing time: Tue 24 Dec 2024 14:00:53 +0000
ROA not before: Tue 24 Dec 2024 14:00:53 +0000
ROA not after: Mon 24 Mar 2025 13:00:53 +0000
asID: 7861
IP address blocks: 209.29.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:50:40:31:f2:8b:88:e3:ed:e6:b2:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Dec 24 14:00:53 2024 GMT
Not After : Mar 24 13:00:53 2025 GMT
Subject: CN=9cecaefe-d013-43be-b95f-0c188b4930e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:29:0f:dd:bf:dd:c7:c1:cd:38:83:86:1b:29:
ee:be:37:58:f6:a2:a0:44:20:21:8f:ed:25:d5:ba:
87:d6:8b:16:95:dd:53:0a:cb:7c:28:02:33:bd:ae:
68:1e:0c:e0:ef:24:63:51:d3:5a:26:94:25:19:2b:
b2:b1:e8:ce:e6:7a:f6:76:25:1e:5d:08:16:08:04:
b3:4a:db:82:a2:71:3d:21:52:1e:a0:b8:54:f0:84:
29:b9:31:3c:21:cf:f0:98:f1:f9:8b:77:a3:93:ca:
32:a0:d0:a5:a2:9d:93:f8:3d:ad:71:85:cb:5b:01:
79:92:1c:2d:3f:1b:3f:3d:22:f6:f9:45:27:7c:b6:
1c:50:af:68:b2:89:c4:b9:78:25:72:32:23:d2:1d:
e0:4b:35:1a:86:26:7e:93:86:a3:53:cc:9f:07:88:
5c:d5:ec:92:20:d5:83:1e:2e:41:ec:69:da:db:d1:
7b:d1:ab:96:0c:a2:1e:2a:e1:7d:a4:5b:a0:4b:46:
fa:0c:57:81:92:79:39:44:53:e1:06:39:02:bd:9b:
4b:12:9d:e9:ab:30:34:c1:c9:63:46:61:5b:be:e6:
d3:8b:e7:29:f1:c4:78:0e:d1:4d:66:cf:d1:5b:94:
68:fb:52:cd:58:9e:7e:f4:a4:c1:11:00:0b:39:31:
36:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:19:1A:8A:EF:A6:6B:A4:AB:AC:8C:D5:59:5E:A6:6C:76:C2:DB:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.29.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:0c:48:52:61:81:78:68:5f:15:61:3b:69:a3:33:76:b3:71:
fd:c8:5c:f3:ab:d1:c7:0c:79:51:2f:2a:24:93:70:fb:b7:6a:
34:b9:43:11:2e:15:ab:fc:76:ec:4a:5e:e0:9b:ca:b7:e5:f2:
a3:f1:79:b1:64:ae:8c:4e:01:48:b7:4c:32:e8:d4:fc:e7:04:
42:15:77:1e:85:ee:17:66:e2:03:62:c3:4c:36:02:44:4a:1f:
f8:3b:46:f6:6e:74:7b:73:8c:d7:ab:20:60:70:50:60:f4:ce:
ba:ce:eb:45:3f:a0:12:3b:93:1d:e7:65:4f:c6:4a:f4:01:4a:
cb:ec:c2:b8:64:61:a7:59:0e:49:70:2a:fa:5c:35:9d:ba:fd:
9d:04:c8:a7:76:9e:7f:c2:2c:bc:79:73:4f:ad:1b:e1:23:34:
d5:b9:a6:47:ac:bc:d4:d8:8c:82:fc:c6:35:67:c2:df:56:5a:
ec:8d:5d:38:7d:16:c6:2b:fc:d3:0a:c9:b6:ad:e4:af:3e:27:
c1:19:8a:93:a3:a1:f8:04:27:0f:4a:22:ef:a1:ca:ee:57:87:
21:dd:f2:b0:2e:01:20:3b:fa:83:ff:15:8f:c5:d8:7f:79:1b:
63:e4:34:5d:60:e6:c1:90:23:10:94:f1:fc:8d:62:ac:a5:62:
99:80:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:58 2025 by rpki-client