Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cafcd7f-32ae-3a79-97b6-3aab3673281f.roa
File: 9cafcd7f-32ae-3a79-97b6-3aab3673281f.roa (raw, json)
Hash identifier: +wPHQreoNM/ryvGED40lOMQQ3k97XIR/jVYF+f3X6z4=
Subject key identifier: 69:BA:C9:A8:4B:39:32:25:D5:B5:25:0B:46:62:8F:3A:F8:50:E4:82
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848ADC60E7A2DB5E1B608B39900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cafcd7f-32ae-3a79-97b6-3aab3673281f.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 21723
IP address blocks: 209.53.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:0e:7a:2d:b5:e1:b6:08:b3:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=42cf5182-21ff-4d86-b478-21891e27c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:df:f1:4d:b9:6d:49:7a:db:b8:4f:22:ba:
73:98:4f:36:3a:fc:dd:7a:78:06:30:b4:bd:4c:df:
9d:ae:8e:fc:6c:0c:d1:a6:23:56:dd:4d:9f:33:f4:
0f:22:86:eb:ec:47:cc:9f:34:97:5b:8b:e0:52:1d:
97:d4:5d:4f:6f:1a:e8:18:02:89:3c:0b:3c:4c:4c:
37:4f:b0:34:9d:1b:2c:fe:86:37:05:dd:55:f5:0b:
15:51:1f:7e:d3:82:cb:89:5f:4a:2f:55:8f:3b:33:
1d:15:9e:fe:67:8b:65:dc:57:52:b9:bd:80:84:bc:
54:42:23:9c:d5:cd:66:22:63:c6:46:8a:f5:a1:35:
fc:fc:57:94:f7:b4:7a:c2:40:40:00:39:fa:62:2d:
61:b2:c7:31:87:99:b4:dc:9e:9e:fc:d0:a5:35:9d:
08:83:63:19:d3:a2:9f:ad:fd:98:60:d7:5b:42:97:
c8:02:4a:bd:f9:f1:1c:23:76:72:5f:5d:f4:18:fb:
1f:f2:36:59:19:81:87:68:36:96:a6:94:f9:54:d3:
88:1e:85:4c:87:be:df:f1:58:24:c8:86:e6:d4:c4:
78:a7:87:a8:34:22:19:c2:89:aa:8c:76:e8:d6:89:
97:35:38:dd:fa:2e:16:49:d5:1d:c1:e8:ec:c7:49:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BA:C9:A8:4B:39:32:25:D5:B5:25:0B:46:62:8F:3A:F8:50:E4:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cafcd7f-32ae-3a79-97b6-3aab3673281f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.53.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:c3:6d:81:54:47:aa:23:13:11:14:d0:fd:f4:4a:e2:25:f4:
40:cb:d7:8d:6d:c2:02:3f:cd:d1:db:a2:f4:31:39:0d:b5:1b:
4f:05:03:49:6d:c4:ce:8c:2d:5f:91:4b:c3:92:5e:85:9c:43:
18:b2:f2:e6:84:ca:6a:7a:a8:82:f5:6b:55:01:80:92:38:6e:
b7:51:1e:54:10:13:5c:90:0a:2a:52:99:ca:67:9b:38:7e:2e:
fc:68:80:66:25:3e:48:4f:12:76:d1:66:f5:76:20:81:29:7a:
25:d4:40:f3:3f:30:98:2b:bb:e2:24:1f:b1:46:c3:1d:ac:55:
8c:36:3c:41:56:71:75:f0:0b:33:75:ad:bd:e9:e5:66:3c:c7:
ea:b5:15:94:fa:e7:a9:95:ee:20:5f:18:c5:31:95:62:3b:cc:
55:5a:ca:1c:bf:02:a2:47:27:4f:54:51:58:a6:50:35:e9:6f:
a5:ac:aa:d2:cd:f5:e5:b7:d0:05:05:9f:91:65:f7:7e:68:41:
e3:0b:22:cb:70:75:e4:0a:49:4a:e4:8c:14:b5:73:27:ab:1f:
ec:ec:cf:01:27:37:31:43:3d:ec:e6:7c:d3:98:03:7c:72:66:
b8:31:23:f8:95:05:08:fa:4d:41:3a:de:a0:af:56:8b:58:5c:
3b:0f:5a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:23:51 2025 by rpki-client