Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c8777535-86a1-3f62-8711-bc4ddf4e2ec7.roa
File: c8777535-86a1-3f62-8711-bc4ddf4e2ec7.roa (raw, json)
Hash identifier: /gefG7GfBMO7l7AtxT4MfExbFDUKvd+ggvaDecj0L0w=
Subject key identifier: 54:00:01:AD:B2:B6:1C:21:58:66:21:88:6E:83:D2:E0:7D:6B:BF:AF
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B35B6236A797F85B39626D60
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c8777535-86a1-3f62-8711-bc4ddf4e2ec7.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 40934
IP address blocks: 209.52.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:62:36:a7:97:f8:5b:39:62:6d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=175a7a9d-59e0-4ab9-aa1c-316a997479f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:85:dc:8c:3f:05:bf:78:3b:97:b8:5e:c9:c1:
7b:1f:99:93:58:11:0a:a8:ea:b7:66:12:55:fa:fc:
f0:b8:e3:02:47:f5:12:93:9d:92:08:cb:80:43:b2:
9a:66:67:a2:9a:7b:c9:d1:b9:a9:1a:0e:ba:4e:dc:
f1:5e:cd:82:bc:7b:c7:22:b3:38:27:03:1e:fd:c7:
95:53:b2:e1:0e:12:f1:2e:5e:2f:57:71:12:08:b2:
81:9c:31:df:03:ff:2e:ac:96:1e:25:d1:b9:ec:2e:
f4:dd:3c:ff:37:c2:15:7c:d0:e3:12:6f:36:89:39:
9f:e2:0e:65:57:97:4d:3f:da:7c:51:6f:f2:74:06:
27:ee:ae:8e:e5:99:c1:67:a7:04:4a:72:27:0e:87:
c5:4d:1f:d1:03:27:50:1e:6c:a9:be:ed:ba:9b:47:
44:08:eb:ef:5c:a8:2a:d7:26:26:40:e1:c6:df:5c:
e5:08:35:99:a5:cf:70:e9:4b:21:4a:da:13:54:2b:
45:49:c6:7b:1b:d0:2d:96:5d:e2:79:d4:ce:85:f1:
23:57:75:3d:08:d2:0a:25:6e:a7:a6:49:c6:5c:c1:
32:38:31:29:2c:2a:8d:1c:ab:d1:60:d3:c5:9f:51:
e6:43:91:e1:d0:4f:98:94:d2:34:51:32:9c:de:40:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:01:AD:B2:B6:1C:21:58:66:21:88:6E:83:D2:E0:7D:6B:BF:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c8777535-86a1-3f62-8711-bc4ddf4e2ec7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.52.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:1f:ff:12:5c:c9:2b:a3:41:e1:74:d3:cd:15:03:99:e0:b9:
ee:b1:9a:ac:79:53:cd:00:c6:67:f9:d4:22:ef:88:43:e3:b5:
10:4c:7a:b4:f7:04:d9:b7:13:c4:9d:40:14:41:9c:79:13:58:
f1:43:29:d7:67:64:ac:0e:29:94:10:7b:d9:75:0a:78:21:ea:
3f:d9:30:94:e8:ec:b6:0f:95:2b:d6:a2:98:20:26:f2:6c:cd:
5d:ba:35:9f:cb:cc:2f:34:e1:5d:6b:d9:ef:d3:30:44:96:d3:
ed:6c:a8:63:ac:cf:3a:81:47:6b:8a:50:b1:27:db:72:60:e4:
b4:a3:b9:53:bf:2b:3d:59:2f:ab:3f:a4:08:fe:d2:0b:9c:1d:
24:a7:84:a4:18:7b:ff:d9:e2:c4:7f:c2:45:7d:8e:3f:d0:17:
52:9f:8a:da:a1:1a:c2:17:be:e7:2e:b8:f9:10:18:a3:44:8a:
32:38:1a:94:63:41:90:01:71:f1:14:81:3c:6d:9d:21:2a:be:
43:53:eb:5a:a8:aa:7a:28:f4:f2:ff:8b:22:7a:c0:ef:d7:28:
de:3e:7f:bf:fe:97:0e:ec:1e:cb:55:00:b7:2c:5e:b9:68:3f:
04:2f:a8:23:29:f5:24:7a:92:cb:43:9e:c7:5f:e5:10:d3:d4:
ef:69:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:47 2025 by rpki-client