Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa
File: 059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa (raw, json)
Hash identifier: qUijnJqJtqgTD+GYeWWEPuc6AWhxkQswP9halVyv2Wc=
Subject key identifier: 7A:AC:C4:63:55:71:86:D2:D7:AA:5C:9B:46:E8:40:EF:A3:CC:3F:2A
Certificate issuer: /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Certificate serial: 010D0C9F43285848AC60D468861AFFC7EF78D860
Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 26831
IP address blocks: 209.124.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:d4:68:86:1a:ff:c7:ef:78:d8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=e2db4932-b8ab-4977-813d-d43fa174e511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:28:c7:11:fa:23:f7:9f:77:25:29:7c:af:09:
71:06:34:cf:4e:a6:7b:63:53:cb:23:24:a9:60:2e:
21:fc:1b:73:8d:d8:93:a6:b2:98:f0:d8:be:f9:86:
0d:50:2d:84:97:92:1e:b9:3d:56:ca:8b:4f:8c:91:
ef:12:3f:ba:f3:6c:02:18:70:80:b2:90:55:b3:fa:
be:15:c1:4d:31:e0:34:23:36:7c:c0:98:33:b8:48:
56:4d:13:8e:63:d0:0c:c6:af:42:ab:53:22:d6:a2:
00:2e:50:a1:98:5c:cb:f8:a2:35:2d:e4:f9:74:d7:
68:c9:a9:62:04:4a:35:84:f8:47:34:0f:6f:c9:33:
b3:ee:d1:c4:54:cb:48:ed:04:b4:46:a3:03:cb:c7:
c4:52:e5:77:44:76:6e:79:6c:80:b7:86:fe:1f:fa:
2d:54:91:b5:7e:b3:3b:ee:12:82:ab:59:d3:ae:6e:
63:75:c6:98:ce:0d:5e:12:91:45:0b:14:3c:4b:aa:
d9:7b:80:e1:b5:dd:50:35:46:38:ec:45:9a:17:cf:
fa:81:79:1c:1d:fe:54:65:ab:09:51:de:17:6c:6a:
c9:56:a7:d9:14:c7:94:81:e8:a6:f3:5a:65:3b:83:
4d:3f:f8:1b:13:87:f6:bf:34:9a:5a:f8:f0:38:55:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AC:C4:63:55:71:86:D2:D7:AA:5C:9B:46:E8:40:EF:A3:CC:3F:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl
X509v3 Authority Key Identifier:
keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
sbgp-ipAddrBlock: critical
IPv4:
209.124.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:20:78:a2:c9:e8:65:68:89:d7:89:90:ff:db:37:17:f8:09:
09:c7:7e:68:0f:c5:f6:d4:47:f2:56:73:fa:9a:b1:d3:16:1b:
f4:4e:45:65:6b:e9:10:a9:7f:05:17:d4:a6:aa:51:e3:fd:45:
d6:20:6b:80:50:07:e4:41:f8:1a:fe:41:fe:fc:25:81:44:93:
ef:44:63:d8:e2:3f:75:1c:3c:58:f8:d5:6f:e5:ea:dd:29:3a:
62:82:94:a3:f2:ab:b3:6b:42:f6:c6:e3:05:bc:62:48:d6:21:
74:4d:52:72:bc:e0:2b:33:71:19:d1:9c:2f:9d:3a:ff:3f:09:
50:b0:a0:9d:ce:a6:02:94:2a:e1:0c:c6:86:0d:b4:09:5b:b2:
33:a9:dc:95:d6:82:d5:c3:3f:ce:83:5b:bc:e3:ab:89:b6:de:
3c:8a:e8:e6:40:24:16:4f:72:7b:ac:a1:44:d2:d6:f9:70:00:
20:7c:6d:87:81:9c:6a:77:50:9f:b9:ec:ba:26:ab:99:90:d4:
ec:b5:0b:a8:94:a2:3f:ca:dd:1b:45:21:15:08:64:82:78:9c:
0c:e6:94:57:02:e0:09:f8:8c:ad:11:38:af:93:a0:7d:f1:82:
5e:4c:a4:44:77:28:c4:af:93:6e:30:ca:73:52:5d:0e:de:b6:
c7:3c:64:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:23 2025 by rpki-client