Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/c9cc58eb-4429-3a76-af27-b25061ad5efc.roa
File: c9cc58eb-4429-3a76-af27-b25061ad5efc.roa (raw, json)
Hash identifier: AG1o5j7OWkhIbiCEIPMXXRG8PQtc7CNDbQ3dbSQSxKE=
Subject key identifier: 25:EE:21:1D:CE:4F:C0:B5:88:34:C2:DB:43:59:5B:EA:25:E0:C1:8B
Certificate issuer: /CN=000bd43e-168e-4afa-8dc5-47948687933d
Certificate serial: 010D0C9F43285848AF2B7A64DB3895AF1F146E80
Authority key identifier: 89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/c9cc58eb-4429-3a76-af27-b25061ad5efc.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 69.52.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:7a:64:db:38:95:af:1f:14:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000bd43e-168e-4afa-8dc5-47948687933d
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=1149f865-2837-4e37-9883-1e47480ea223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2b:c7:58:51:e0:c0:c5:15:2e:8a:77:21:75:
09:56:f7:f0:2e:90:d3:73:9c:30:e8:48:b0:04:33:
1a:45:f0:5b:27:70:23:43:b4:f8:7c:a7:09:fe:a3:
9b:67:90:02:0e:3a:a5:e4:c9:28:08:21:aa:38:1b:
13:cb:c4:ac:00:5e:98:06:15:8d:61:e5:45:02:31:
52:fe:a3:93:83:d5:8f:92:a7:4e:04:9d:5f:53:03:
40:50:83:76:e7:39:d7:f6:65:b6:a4:d8:1e:f9:72:
0d:4e:f4:0b:f1:39:28:1f:bd:f3:5a:07:89:27:90:
56:a1:e5:f8:73:1a:cd:0c:a5:8b:cb:5e:6e:d2:07:
18:e4:e7:3e:65:6f:83:35:57:0b:29:5c:72:10:d8:
27:f7:65:63:ac:af:b1:a5:5e:1a:05:48:9d:12:48:
e9:29:48:85:01:9e:f1:78:4c:b6:8e:e8:31:ed:e2:
38:84:4a:9f:a4:0e:29:c4:f9:b5:e8:ae:0f:5d:80:
61:60:ae:fc:64:8e:f0:b9:20:81:5c:35:42:46:e9:
63:b8:b0:d7:f5:10:eb:a6:c7:fe:77:7b:c7:9e:66:
62:21:e1:5e:fd:0f:4b:55:35:94:6c:1a:e6:56:59:
8f:d5:ae:4d:de:63:cf:3e:e5:d2:22:81:20:72:85:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EE:21:1D:CE:4F:C0:B5:88:34:C2:DB:43:59:5B:EA:25:E0:C1:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/c9cc58eb-4429-3a76-af27-b25061ad5efc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl
X509v3 Authority Key Identifier:
keyid:89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
sbgp-ipAddrBlock: critical
IPv4:
69.52.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:7f:7f:c5:23:05:c5:0a:71:db:e2:40:b5:2a:91:47:a0:f4:
a5:91:4b:25:2f:98:49:ff:25:2d:02:92:3a:18:5e:01:e7:78:
c2:3f:3f:16:6d:1b:89:ea:12:e9:ef:62:a5:03:e5:42:3c:0f:
f5:5a:ec:e6:a8:4c:1f:96:7a:04:0b:ba:27:56:78:67:ac:96:
0e:ee:4b:4c:e6:b8:40:4f:32:37:a8:fa:21:7f:24:03:0f:cb:
db:cb:40:af:42:20:3a:28:2d:e3:d0:19:97:a0:e8:cf:13:9c:
c7:bb:7f:69:ac:52:20:10:67:cf:3d:e4:2c:dc:46:78:36:2a:
d5:18:a8:83:a3:5c:9e:23:fd:5d:b2:e9:bc:4a:69:62:1a:d0:
6d:9b:40:f6:29:92:69:e5:ae:46:98:33:5f:9a:18:d1:73:e9:
63:f9:c1:2a:88:ec:cd:ea:94:3e:05:c7:b3:9d:c5:95:8d:e0:
99:3c:48:65:00:ba:a7:38:c4:a8:f2:d8:f2:8f:7c:09:c9:c9:
59:5f:f0:8a:91:a6:ca:55:68:6b:f5:a5:e9:20:fd:91:f6:f6:
9f:44:7e:99:94:24:f7:c6:db:a0:45:cd:d7:bf:27:ff:fd:92:
1a:e9:36:08:5f:60:7e:e3:45:ca:cd:31:1b:83:76:37:54:89:
9a:83:5f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:50:38 2025 by rpki-client