Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d8aa1099-5a34-38c1-9b0e-befc0326ddc5.roa
File: d8aa1099-5a34-38c1-9b0e-befc0326ddc5.roa (raw, json)
Hash identifier: 53VLB5JraQY+OIBEiP4xx8AsvMA6+oqBHOqlV5iaeuE=
Subject key identifier: FF:5B:E7:1E:6E:04:3B:F2:1D:59:9A:F3:78:24:A6:22:FF:6F:25:CC
Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial: 010D0C9F43285848A136126CEFFF081FC5B0F558
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d8aa1099-5a34-38c1-9b0e-befc0326ddc5.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 13984
IP address blocks: 209.151.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:12:6c:ef:ff:08:1f:c5:b0:f5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=5f35973c-afd4-4a36-80a2-fa044db38872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:7d:81:c8:04:a5:6b:1c:90:10:29:fa:d5:
2c:07:9c:46:05:7e:80:6b:fe:e1:d6:b7:68:e3:af:
7b:d6:41:b2:1e:cb:21:03:c1:bc:19:36:88:ec:66:
f7:6a:bf:f9:f5:81:13:61:df:bc:41:f4:62:cd:f6:
e8:3b:ff:32:c0:1b:a3:2e:78:f5:23:4e:a2:a7:be:
9b:09:ed:c7:7f:9a:ef:84:8e:4f:88:5d:30:98:e4:
fe:3d:3f:a2:5b:08:d9:df:db:0b:fe:3e:a3:91:df:
b5:93:40:78:4a:b2:f0:31:36:14:08:73:d0:58:7b:
eb:3f:18:10:44:2b:ed:86:fb:a9:37:74:31:a4:2f:
f6:19:46:80:15:f1:e9:39:2b:1c:b6:7f:3d:d5:c8:
cd:8a:89:e4:19:44:21:2d:7e:5c:cf:d2:11:2d:53:
a0:89:c6:cf:74:24:26:9a:7d:2b:be:40:7d:b8:0f:
7e:5d:df:a0:f3:cc:6e:95:6a:ab:a1:f0:36:65:2d:
9f:6b:be:95:c5:50:74:06:9f:1e:ed:9b:2c:6b:60:
be:e7:db:29:97:99:d2:33:4c:91:21:11:db:c5:fe:
0c:68:66:d1:a8:22:1b:7d:69:5f:98:4d:bc:52:60:
14:dd:12:d2:60:2a:4d:40:6f:26:9a:48:7c:c6:7a:
1b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5B:E7:1E:6E:04:3B:F2:1D:59:9A:F3:78:24:A6:22:FF:6F:25:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/d8aa1099-5a34-38c1-9b0e-befc0326ddc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
X509v3 Authority Key Identifier:
keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:c7:4a:89:58:fd:24:c9:95:9f:a0:7c:9e:c2:2f:74:f2:3b:
d4:d8:e7:3e:f1:3f:42:2d:15:23:51:14:29:1f:0b:a7:7e:14:
85:f2:6f:27:d7:3f:37:91:52:27:57:df:cc:e1:27:17:0d:d6:
d1:8b:db:37:56:88:e0:4b:fe:c9:c4:56:b9:4b:89:59:fb:50:
68:e4:e8:9f:29:31:00:1e:09:65:91:b3:d0:b4:7f:b8:a4:e3:
19:74:be:07:73:5e:73:5c:8c:ac:ee:9d:65:d6:a4:4e:0d:ce:
58:50:73:b2:71:0d:eb:92:e3:df:bb:d4:09:10:52:a9:7a:fc:
bc:eb:70:e7:45:a1:c3:48:5f:26:ba:0c:fc:17:ee:41:22:d2:
10:6d:10:2f:68:04:9b:f5:8f:c0:95:6e:9c:4d:8e:51:d7:f9:
22:a1:e0:73:69:f8:41:c9:a2:df:e1:bf:7a:55:33:85:d2:e3:
2f:ce:92:82:e1:87:24:37:1d:1f:73:25:c5:4e:03:13:e3:7f:
15:fb:5d:1e:2c:64:9d:61:92:bd:2c:f4:d8:18:a5:36:a9:52:
97:76:46:7a:c1:44:4b:4b:e1:67:d4:9b:eb:17:10:d0:51:3b:
f6:f5:fa:6c:81:ac:ff:b6:c5:47:b5:3a:04:2b:87:7f:67:c7:
6d:28:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:19 2025 by rpki-client