Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4758cd24-a95f-3bd5-b342-8e08369bfb40.roa
File: 4758cd24-a95f-3bd5-b342-8e08369bfb40.roa (raw, json)
Hash identifier: 0d2GKZ74VxR0a2GHjp1ktR8nGfx6hAqrJfzOxujPVQw=
Subject key identifier: 1C:B0:5E:BE:83:54:A5:E1:A5:3C:17:2D:A4:58:D1:04:3E:E5:DF:A4
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F6A02B74831F55F3B05E00
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4758cd24-a95f-3bd5-b342-8e08369bfb40.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 8560
IP address blocks: 209.46.120.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a0:2b:74:83:1f:55:f3:b0:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=984aa8f7-137e-465c-a891-cb1232b22457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:4c:1e:d7:4a:02:37:f0:e8:c1:de:c7:b8:
bc:6c:ad:3a:6f:a3:0d:e1:77:dd:4f:4e:98:e4:eb:
44:5d:5d:ac:5f:0e:0b:da:27:bd:e2:c1:8e:eb:34:
29:25:1b:df:61:71:e8:e1:6d:dd:92:57:1a:cd:9d:
fa:1c:15:e5:e6:61:67:99:e1:73:de:df:e0:4f:9e:
62:de:d0:f5:ac:8b:b1:b1:c9:5b:7d:0f:d2:c3:43:
ad:6e:7d:a5:83:f2:dc:81:bc:1e:ee:95:f4:fd:ce:
0a:b4:17:99:34:09:2d:15:d2:71:40:ec:a8:fd:52:
3b:1b:e3:0b:e5:a6:31:62:84:dc:8a:98:e4:5d:19:
e8:1e:a7:86:cd:d7:75:55:60:9c:c4:01:67:41:28:
1d:f6:de:da:1c:9c:ca:30:a0:72:7e:fd:b2:63:1d:
e2:63:7a:57:5a:7c:81:c9:f4:fb:43:e1:40:7c:59:
3b:13:17:40:d5:2d:3f:ec:0e:38:4c:f1:a9:e9:d1:
7d:ab:bb:42:07:5d:c5:77:60:a1:88:b2:e1:f5:f4:
32:08:f4:7c:ff:40:fb:97:e6:74:85:f2:c8:2f:78:
44:7c:3b:82:36:86:7b:79:09:34:85:33:ec:61:39:
ae:8d:f3:c3:8a:ec:0b:42:c6:93:ed:f4:55:69:6e:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B0:5E:BE:83:54:A5:E1:A5:3C:17:2D:A4:58:D1:04:3E:E5:DF:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4758cd24-a95f-3bd5-b342-8e08369bfb40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
209.46.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:40:fd:00:be:ea:c0:1f:2e:c5:5d:12:24:29:c3:b3:f8:ab:
d7:66:0f:2f:5b:0a:6d:d8:0f:ff:63:eb:ae:83:89:f8:f3:8f:
55:eb:44:48:c7:5e:c4:59:6c:0f:1e:90:69:0c:ac:e7:2d:e9:
f3:8e:45:8c:c8:3f:1f:e6:fb:04:46:6a:18:1e:f5:3e:cb:b3:
51:4e:75:af:3b:8d:2e:66:11:77:91:c1:23:8e:53:b9:70:c5:
44:2e:cb:57:50:34:00:17:1a:a5:17:5d:75:52:4b:ff:37:21:
9b:f7:e8:8c:a3:7a:ac:43:89:69:86:0e:3b:2b:73:7f:c0:e2:
ea:05:12:28:90:f1:72:fd:44:a0:5c:b6:c2:4d:33:bd:5c:6e:
f3:1c:d0:e4:44:28:3e:e2:e4:48:9d:7f:98:ee:bd:2a:bc:73:
a3:4c:b7:94:41:db:3b:16:a5:4d:ab:bd:1b:4e:2a:6f:a0:61:
e3:c5:bb:14:9f:77:24:b5:ae:aa:86:89:48:63:fa:8b:2e:34:
c6:31:9b:a8:38:da:d2:47:5e:0a:c8:b9:c6:f5:7e:8e:ab:cb:
7f:1a:f8:6c:f0:ff:10:b9:5f:49:ad:a1:28:ef:d0:2b:22:c6:
e0:6f:f6:87:59:7d:2d:58:0d:13:7e:c6:84:b7:d1:bf:d2:b4:
4f:4b:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:39:38 2025 by rpki-client