Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde/7a55230b-af99-3be9-a509-4bc56d557954.roa
File: 7a55230b-af99-3be9-a509-4bc56d557954.roa (raw, json)
Hash identifier: u9HzCsRZpKumym3uANKsUVpRqx532uHjNqWyy8mHyOA=
Subject key identifier: 96:8A:71:80:DA:B8:40:E9:DA:7A:02:9E:C1:40:5C:55:B4:E3:18:0C
Certificate issuer: /CN=d5355e60-f53c-4707-ae46-30946e26bcde
Certificate serial: 010D0C9F43285848A400B8846460629FCF3BC100
Authority key identifier: 57:62:13:57:D1:72:E3:C4:86:80:E6:04:9F:24:2D:99:33:D4:5E:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde/7a55230b-af99-3be9-a509-4bc56d557954.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 54544
IP address blocks: 209.160.109.0/24 maxlen: 24
2620:76:6000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:b8:84:64:60:62:9f:cf:3b:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5355e60-f53c-4707-ae46-30946e26bcde
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=105f59b7-d2c1-47df-adc8-365ea960fb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:35:82:ce:6c:63:79:60:a8:06:5c:3e:0e:ed:
b1:8e:24:9f:81:54:b7:76:6e:50:f4:f7:c5:05:b5:
a3:8f:6f:d0:cc:ec:ff:ad:47:3b:fe:fd:f7:ba:c6:
c7:30:b6:b8:5c:ef:a4:0e:da:b7:60:f0:6f:df:81:
f3:70:40:ba:e7:6f:ac:b6:27:40:0f:60:b0:fe:2a:
16:1f:b1:c0:38:ef:87:1e:46:ee:c0:9e:13:a2:11:
b5:b9:13:63:92:33:d6:4e:b7:44:59:63:43:f8:8d:
c1:f5:ff:8f:6a:71:82:91:1c:29:38:41:e8:b7:ee:
72:1e:f3:09:72:d5:0d:d1:a2:ed:47:f8:ab:bd:39:
c6:24:fe:ad:a1:02:71:5e:99:69:fe:d7:0e:08:ab:
b2:41:02:ed:d9:7e:4a:eb:a9:03:26:e0:1f:47:aa:
cc:fb:1d:9e:18:6b:99:17:c3:b3:9f:83:d6:85:bf:
f1:2b:56:32:47:c9:74:72:ef:fd:84:b5:33:7d:f3:
2e:4a:df:b8:4a:68:d4:24:e6:79:de:0b:2c:c3:b9:
0f:05:c8:45:ce:a4:74:7c:16:c0:98:03:a3:2f:0a:
9e:13:2f:6a:25:f0:f5:b9:62:b3:62:c9:f8:f9:cb:
c2:e5:b2:bf:85:3b:54:4b:f1:1a:c2:fa:66:dd:31:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8A:71:80:DA:B8:40:E9:DA:7A:02:9E:C1:40:5C:55:B4:E3:18:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde/7a55230b-af99-3be9-a509-4bc56d557954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde/d5355e60-f53c-4707-ae46-30946e26bcde.crl
X509v3 Authority Key Identifier:
keyid:57:62:13:57:D1:72:E3:C4:86:80:E6:04:9F:24:2D:99:33:D4:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d5355e60-f53c-4707-ae46-30946e26bcde.cer
sbgp-ipAddrBlock: critical
IPv4:
209.160.109.0/24
IPv6:
2620:76:6000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:30:c6:da:8e:8b:a0:d2:c2:6b:c6:5d:f6:44:92:76:e7:3d:
b0:0d:50:2c:38:5e:ec:c3:71:91:41:e8:43:3f:f1:9c:98:5a:
14:34:f9:76:e6:9c:6a:33:4f:87:04:7c:61:6b:6c:1d:9f:e9:
d8:c0:b7:95:a4:05:f7:b9:55:4a:e4:33:8c:f3:e5:69:2c:a9:
16:a6:43:81:31:64:28:5a:dc:57:00:da:bd:de:e9:cc:25:fe:
54:97:d2:4d:b2:63:a3:13:79:cf:98:b0:af:b8:81:57:66:82:
73:ab:15:b4:67:b1:29:d8:7c:dc:48:75:25:d9:fe:d7:d4:65:
b4:b4:92:62:cd:91:1f:15:e3:2f:ae:29:0a:81:9f:30:0f:33:
a1:fa:6d:45:6c:f6:7f:f1:3e:fb:1b:00:6c:75:9e:44:12:7a:
71:b5:e8:42:95:75:c7:1d:6d:8b:b6:1d:d5:99:74:c2:df:20:
a4:53:75:da:48:a1:a8:a7:f4:49:9b:bb:32:74:c0:3a:28:0d:
07:37:96:36:ac:30:31:64:76:56:dd:54:8f:e7:48:ef:0f:ac:
78:6f:19:b9:43:f2:43:59:54:a0:4c:74:06:65:80:de:84:b0:
0b:cc:93:2a:ae:c7:c0:12:aa:07:dc:9b:60:44:8a:88:d0:af:
f3:45:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:20 2025 by rpki-client