Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/844ba2fa-aad0-3721-98c2-12891a1907d3.roa
File: 844ba2fa-aad0-3721-98c2-12891a1907d3.roa (raw, json)
Hash identifier: oJBwAw5k8pYNGtPtwQ10Gok/cmN39ZD/VY4v1fS5UBs=
Subject key identifier: 31:34:26:79:37:DE:26:58:03:64:E6:3E:3D:BE:16:3C:E5:31:6C:6D
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B626144AE8D4BB0E8AFB15A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/844ba2fa-aad0-3721-98c2-12891a1907d3.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 852
IP address blocks: 209.53.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:14:4a:e8:d4:bb:0e:8a:fb:15:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=c811a162-7b2b-432c-a706-33dcb1486266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:dd:0b:fc:aa:80:32:f5:7e:36:97:bb:4c:
22:9f:93:7a:3d:04:b5:cd:9b:f8:46:13:4b:2e:7c:
9b:dd:d5:6f:f7:73:8f:40:38:36:db:d9:fc:ff:e3:
dc:dc:a6:d7:03:cd:89:d8:74:06:80:e3:48:75:bb:
33:e4:ee:42:1d:f3:7a:3a:69:21:f0:89:77:05:32:
c1:64:26:c7:92:0e:48:31:b8:8b:86:c8:86:84:97:
f2:5f:96:c1:66:5a:d7:8e:0d:5b:a5:57:62:d7:ef:
d5:81:e9:c6:7f:ad:81:c5:98:92:e1:90:ff:00:a7:
96:2e:81:51:9e:2d:7c:2c:c7:84:ff:63:18:83:3b:
30:06:c0:a2:00:6c:d6:23:bc:f6:c0:60:93:6a:1a:
1e:03:7e:5c:7b:d3:41:56:67:73:2d:58:c0:2c:b7:
be:24:33:f9:a8:54:b3:a4:26:1a:fb:9a:66:8a:51:
44:f6:f3:b9:83:56:ab:e2:3a:da:4a:96:35:c9:ea:
9c:b3:c1:61:ff:94:e0:dd:e3:6e:b6:6f:39:99:98:
b0:04:a9:f3:eb:49:a0:c9:3f:68:1a:49:57:90:3d:
25:c8:4e:f8:49:9b:52:a5:de:72:60:9c:be:83:01:
e8:28:94:ba:15:ac:ba:9a:7b:84:75:cf:87:dd:ed:
58:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:26:79:37:DE:26:58:03:64:E6:3E:3D:BE:16:3C:E5:31:6C:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/844ba2fa-aad0-3721-98c2-12891a1907d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.53.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d6:a6:62:a1:77:f4:c8:8c:27:dd:62:96:c4:93:ae:9d:f4:cd:
38:5d:91:e8:6c:cb:7d:7b:46:bc:4a:97:b5:65:55:54:48:a9:
ef:e9:aa:1b:e6:7d:57:35:82:a6:42:28:37:75:46:15:9c:45:
d2:65:bd:d6:89:a0:ba:a8:59:e0:c1:b5:c1:64:1e:0d:0d:6f:
08:37:19:43:63:c3:76:eb:b1:3c:50:e8:a3:f2:13:68:b9:13:
9b:44:42:18:c2:41:fb:79:f9:15:cf:4a:de:22:c7:46:2b:60:
aa:4d:7f:8e:be:5b:ff:18:9d:56:93:ab:a5:04:25:d5:18:f6:
2c:07:dc:a3:8c:f4:6f:a7:8d:3b:1c:8b:0a:e1:40:1d:1d:9a:
e7:b2:76:19:6f:c6:bf:47:39:8c:2f:8a:94:d1:28:13:80:90:
68:8f:e8:8b:2f:71:78:34:ac:54:ca:06:e4:1b:d2:d4:5d:0c:
e7:4a:b7:c7:0d:b0:b8:c9:57:af:37:81:95:a0:28:fc:fa:34:
27:2c:6c:0c:ac:18:b0:fd:9c:82:49:2b:2d:79:78:e5:ab:9d:
a4:90:13:55:fe:73:4f:80:c1:ad:48:aa:00:8c:68:4c:01:41:
45:b8:7d:6a:b9:de:fb:e9:24:46:be:f9:89:eb:3e:6d:f2:12:
b2:77:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:00 2025 by rpki-client