Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/843bf504-422b-36b8-8fdf-915be44ec0ff.roa
File: 843bf504-422b-36b8-8fdf-915be44ec0ff.roa (raw, json)
Hash identifier: 4d0cIC/JkxjK/GIxL1Bj5oz2FFX1krkChaZ5LiGMras=
Subject key identifier: 90:C1:09:C3:BA:46:1F:5A:B2:CB:35:9A:3F:4F:96:FA:0D:F9:55:A6
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837E4926C6D45BACD38A3B29E60
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/843bf504-422b-36b8-8fdf-915be44ec0ff.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 12 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 209.29.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:e4:92:6c:6d:45:ba:cd:38:a3:b2:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 12 05:00:00 2023 GMT
Subject: CN=0b70603c-f654-41a9-a9db-5e75c42842ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:b6:40:c7:76:43:76:f5:14:f7:ef:30:d4:
72:db:e0:e2:0b:4d:6d:7a:c2:a8:99:33:66:88:c6:
7e:63:b3:a1:2f:96:ed:d7:73:2a:cd:67:36:c2:82:
59:fe:55:df:bd:04:3c:4f:9e:40:07:3e:b7:47:05:
00:11:32:1f:1d:ed:8a:4a:ad:a6:42:41:ad:7e:da:
ab:0b:60:ba:62:b3:c0:a3:fb:2d:7f:e7:9a:4f:53:
05:f2:bd:dc:7a:7e:85:ce:37:96:e7:fe:18:5f:9f:
4f:5e:1d:e0:12:29:42:1e:39:ee:dc:3c:7e:26:6b:
74:54:bc:a6:a5:0c:ac:61:16:e4:32:6d:ec:8b:6f:
3e:07:d5:77:5e:85:6a:3e:ce:5e:6e:03:a6:b6:f3:
c9:58:a5:f7:9e:51:10:ee:4e:2d:75:da:26:d7:8a:
ab:7d:15:0f:32:4b:ef:c5:f8:7f:be:54:61:99:ca:
b0:61:53:fd:60:bb:00:c2:24:db:2e:5d:6c:13:6c:
94:95:33:be:ee:3e:3d:1c:06:0a:6c:1a:96:c5:24:
74:a6:7d:02:e4:bf:31:dc:6b:3d:7b:57:ae:e8:92:
8d:7e:88:a1:f1:41:e1:24:d5:71:dd:b6:a2:33:65:
3a:d1:22:45:f0:57:7d:88:d9:44:6f:18:d9:c1:1a:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C1:09:C3:BA:46:1F:5A:B2:CB:35:9A:3F:4F:96:FA:0D:F9:55:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/843bf504-422b-36b8-8fdf-915be44ec0ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.29.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:c7:62:9a:28:45:ff:ec:35:6a:60:ed:30:59:4e:d6:a4:13:
26:ab:31:5d:9a:be:02:a8:0b:6d:a2:eb:3b:da:69:84:e6:29:
3d:a3:17:22:45:9d:aa:e8:63:a1:4a:67:53:5c:9d:67:5a:dd:
e5:61:41:ec:95:31:d4:07:dc:3c:69:4d:58:15:8d:c8:09:c2:
22:87:c1:93:08:e3:25:10:ab:87:c4:22:6c:a0:01:25:42:d2:
b6:6f:70:69:49:9b:20:61:a2:99:e1:60:35:8a:55:9e:46:37:
1f:5a:e7:89:cf:3d:62:aa:7a:6d:ad:c1:35:ed:8f:1f:23:8f:
05:49:61:cb:3d:1f:63:d1:b3:5c:6b:0e:bc:a1:f4:d4:af:79:
23:fd:ea:79:51:62:6a:db:74:c1:0d:71:59:fc:4b:da:2b:16:
a2:13:2c:b2:a5:5a:84:78:4d:7a:c8:16:7e:06:be:ba:24:e2:
ea:9c:a5:d6:83:b0:84:96:6a:79:03:4a:19:e9:74:bf:2f:b9:
5e:ff:39:92:7e:6f:24:4a:06:37:34:91:36:0a:7e:68:d0:ac:
73:b3:52:fb:c9:62:19:d3:71:3a:8d:f3:5f:ed:f7:e8:c0:3f:
8b:82:84:85:9f:f1:fa:c3:02:0a:a2:7b:f8:14:dd:5d:4e:3a:
ee:b8:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:07 2025 by rpki-client