Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa
File: 1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa (raw, json)
Hash identifier: zKj1K7+eW6qyQRDGRIyPZCOsSuXVg8UdETUZXiUmpUA=
Subject key identifier: A8:B6:F8:78:D6:76:17:EF:66:E7:C7:D5:EA:78:6A:D5:28:11:82:44
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F43285849350E8CA18EAC5A572FAA1140
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 1239
IP address blocks: 209.20.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:8c:a1:8e:ac:5a:57:2f:aa:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=f9657ca2-23b8-4bde-89b8-96a53aaff593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:59:27:56:b6:dc:c0:12:25:80:ad:11:5f:
d1:e0:a9:3c:a1:3d:78:11:79:16:d2:99:3f:a7:70:
7f:74:93:63:2f:06:e1:ee:d9:d0:cb:05:cc:0a:ca:
df:dc:44:ee:bf:e3:5a:f3:02:1c:c7:16:6c:ac:be:
d9:b4:6f:93:70:38:b9:44:6a:3a:7a:d2:06:d0:e9:
82:22:77:ac:5f:b6:0d:41:9f:16:8a:d1:13:eb:69:
26:a0:92:5e:f4:51:61:70:89:1b:c8:39:a0:a3:f5:
d3:67:7e:9c:0f:24:0d:e1:27:f0:6a:a7:e1:55:49:
2c:1e:3b:5a:0e:dd:90:c7:17:40:1c:c4:8c:63:a7:
f8:c4:33:f3:24:aa:7c:43:b7:5f:49:62:7f:e8:9e:
94:c8:c7:48:cc:6a:2b:62:2f:b1:29:67:e9:0d:ab:
70:6d:87:ca:76:2b:d2:49:d0:97:74:0f:8a:28:7f:
2f:a2:a5:4d:a2:f7:ef:f9:d3:e2:5a:b7:e4:b5:76:
7a:90:be:56:46:60:1e:51:da:08:2c:f9:7d:56:da:
39:c0:b0:01:5b:82:c1:d6:87:ec:c3:dd:d0:e5:3b:
47:66:74:cf:c4:28:7f:06:57:17:26:0c:10:5c:a9:
d2:c0:e4:42:85:1a:44:1e:c1:62:f6:52:cd:1f:01:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B6:F8:78:D6:76:17:EF:66:E7:C7:D5:EA:78:6A:D5:28:11:82:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.20.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:cb:47:8f:25:70:e0:80:90:67:38:07:68:fd:88:3b:8b:29:
89:fb:a7:87:38:38:2e:96:cb:4e:2f:60:04:ba:1c:4b:8f:4c:
68:65:3e:55:01:de:f2:78:df:75:4e:43:f3:1f:2e:38:5e:44:
b5:8e:95:e5:e7:7c:87:c5:27:ee:b6:7c:bf:9a:63:bb:2b:4b:
32:67:c1:05:e0:5f:af:ba:4b:3d:2f:63:17:f8:06:7f:1c:56:
90:fb:6d:e0:e4:d5:b5:72:b2:e7:d9:d3:e3:dd:f5:f9:f4:d0:
a1:15:42:48:46:31:27:7c:e3:10:1e:2a:19:9a:74:0d:7b:ef:
01:4f:8d:8b:d3:a6:8f:52:c5:ed:a4:52:03:1f:ce:17:6b:6d:
98:13:1d:88:cd:10:a8:30:48:55:fe:bb:11:56:d1:94:2c:a6:
47:1e:e5:88:75:7c:d6:c4:79:5b:c8:84:19:27:3f:75:5a:1f:
7b:b1:84:8f:34:e0:81:6f:69:41:f2:b0:80:bb:23:8c:1d:db:
43:bf:74:af:75:78:62:e9:38:8e:4d:4c:ff:68:8e:0a:67:b0:
75:5c:b9:85:d9:f6:c1:3b:f6:5b:42:95:42:cd:4a:7f:4c:51:
47:ad:e4:36:3e:f5:1f:d5:59:8b:bc:5c:21:66:4c:a2:7e:b0:
7d:ca:8d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:17:31 2025 by rpki-client