Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/78e252cc-bd09-3239-a78c-700cc4a2804d.roa
File: 78e252cc-bd09-3239-a78c-700cc4a2804d.roa (raw, json)
Hash identifier: zm5czd+5U7w1MlW8CITQPUhlDAGxuK9OaarJ40ta+CI=
Subject key identifier: E2:2E:1A:00:26:85:45:6B:D0:B6:40:D0:10:0C:85:64:EB:34:DE:09
Certificate issuer: /CN=5b640257-7947-43c1-997a-0af58a465bdc
Certificate serial: 010D0C9F43285848F22C634117F7487C92C00F40
Authority key identifier: E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/78e252cc-bd09-3239-a78c-700cc4a2804d.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 209.209.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:63:41:17:f7:48:7c:92:c0:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b640257-7947-43c1-997a-0af58a465bdc
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=1116deea-eda0-4a39-bd89-b4c465482dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a5:a9:52:44:2a:83:78:1a:5e:12:20:cf:3d:
2b:f4:66:fb:a9:8d:c5:0d:3b:66:48:c4:78:0d:74:
cc:ac:1f:97:8a:0f:1a:78:05:ab:4c:a0:fd:2d:b5:
25:8a:f9:52:92:2c:ba:27:83:1a:75:69:d2:22:bc:
5f:05:53:7f:5e:26:ef:f0:7b:10:6e:85:59:ce:05:
f8:b8:5c:52:41:92:8c:b6:da:b9:8e:d2:bd:4e:36:
a0:c3:c0:52:77:ee:87:ba:29:f4:91:44:73:1f:18:
2d:51:0f:68:18:cd:5b:73:b4:b4:86:39:f6:13:96:
b1:8e:78:92:9c:cf:ed:e8:bd:a6:77:9e:12:12:13:
cb:89:5b:48:15:5e:9a:d6:2c:1d:dc:73:a2:48:b3:
34:1a:47:b5:e8:ee:dc:ec:42:1c:24:39:54:86:94:
54:5e:b2:e2:a1:c7:2d:90:4c:d5:b3:92:e9:4d:1c:
5f:1d:62:73:99:2f:d3:db:0d:29:2c:a6:4d:2d:32:
0c:0e:0e:c3:07:06:8d:e5:4c:16:2b:ab:b7:20:b8:
91:d3:48:b3:0f:d9:62:7b:e5:13:a8:28:a7:8d:34:
2c:4f:ca:31:98:de:6e:e3:fe:9a:55:17:c5:69:85:
62:65:da:95:73:4d:27:c9:46:66:1c:ed:af:37:97:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2E:1A:00:26:85:45:6B:D0:B6:40:D0:10:0C:85:64:EB:34:DE:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/78e252cc-bd09-3239-a78c-700cc4a2804d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc/5b640257-7947-43c1-997a-0af58a465bdc.crl
X509v3 Authority Key Identifier:
keyid:E5:30:3C:9A:AD:0F:44:F7:1E:E3:C1:3C:2D:1B:1C:51:F5:1C:34:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b640257-7947-43c1-997a-0af58a465bdc.cer
sbgp-ipAddrBlock: critical
IPv4:
209.209.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:55:d4:dc:23:0c:5c:d5:79:cd:4b:59:e9:1d:c9:bb:d0:99:
74:2d:75:3e:bd:63:0a:0d:89:6e:9c:63:ef:f5:05:7a:a4:5c:
93:b7:14:3c:94:52:c0:8a:1a:a6:76:bd:10:f0:45:48:d5:5c:
9d:dc:be:3d:5e:9e:d0:aa:1e:b1:a1:69:18:c8:2e:34:23:bc:
a8:1c:32:8b:26:82:f3:54:4c:31:df:a9:e9:a4:c8:e5:52:9f:
d3:c2:e8:5d:1e:a8:ec:2d:01:55:56:97:f8:43:48:d2:23:77:
eb:96:44:90:00:de:9d:34:aa:16:b0:01:5b:a2:98:47:0b:27:
02:1f:d2:cb:32:77:4e:8e:9d:fb:9e:12:ce:a6:eb:27:58:98:
bf:3a:c6:88:ad:fd:d4:cf:55:2a:86:4b:1a:4c:8d:17:f6:41:
56:47:39:a5:db:55:c7:db:a0:7f:25:a1:82:9f:5b:9e:12:fc:
7c:41:ec:76:53:15:27:ed:88:ea:d0:79:b2:da:4b:bf:8a:95:
45:13:41:bc:d2:5a:cd:b1:9b:1a:8a:6b:9c:08:4a:0e:ca:c1:
9e:0f:da:3b:de:72:f7:56:9a:06:c9:38:34:15:7a:0d:d4:6e:
eb:04:23:25:ec:f1:7c:a8:e7:82:e2:de:a4:38:08:8c:63:a1:
0e:9d:00:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:57 2025 by rpki-client