Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/6848c4ce-b333-3c71-aa12-08fa68db7b9a.roa
File: 6848c4ce-b333-3c71-aa12-08fa68db7b9a.roa (raw, json)
Hash identifier: 3wevF613XN/zrKQguokhLFTr7CNmOeviCVhbIYC9wVo=
Subject key identifier: 58:DF:B7:D0:06:49:56:98:FB:EB:CA:44:DF:62:FA:99:8C:B4:1E:43
Certificate issuer: /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Certificate serial: 010D0C9F43285848AC60D47A6D3DFFBBE5249840
Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/6848c4ce-b333-3c71-aa12-08fa68db7b9a.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 26831
IP address blocks: 209.124.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:d4:7a:6d:3d:ff:bb:e5:24:98:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=38eea70b-f966-4099-8999-7cbfbd53e704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:05:a9:4f:e3:c4:24:38:9b:d8:79:56:74:
8e:7a:bb:79:c7:12:7a:e7:03:eb:11:83:2e:76:c1:
18:ee:6e:7b:4a:bb:6f:2b:26:af:d2:b5:14:84:fb:
3d:7b:42:72:66:bb:a9:a7:a3:32:61:0c:1d:49:c5:
05:7d:2e:40:bd:35:4a:c0:be:d3:01:5d:9f:17:12:
30:ab:fb:b7:bb:07:55:96:6b:c1:6c:3f:d7:35:0f:
19:48:89:ee:8a:c7:d6:2e:3f:70:80:22:e9:21:eb:
e9:43:9a:29:0b:13:38:84:81:9e:a3:c6:d3:72:d0:
d9:54:23:47:48:19:5e:d2:e2:d2:4a:96:ef:2f:b1:
44:92:f3:cb:33:cb:77:61:44:48:99:fa:d0:74:d9:
b6:fc:a4:18:ad:e0:5f:ca:ce:c8:d1:dc:28:f2:67:
1a:8e:43:83:2e:f9:63:93:13:de:c1:28:d8:d1:4f:
ce:48:e7:69:f3:f4:96:20:62:eb:8b:b2:03:66:a9:
b4:51:f8:96:67:87:c0:87:b1:91:51:b6:ca:dc:24:
72:17:57:fd:b3:ce:50:6c:d4:2e:03:63:1f:94:1d:
2f:1e:5f:af:61:7a:8f:ca:ac:15:d7:e4:62:b7:bb:
18:c0:1b:21:9a:f8:ab:f7:4b:cf:62:c6:7e:ad:30:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DF:B7:D0:06:49:56:98:FB:EB:CA:44:DF:62:FA:99:8C:B4:1E:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/6848c4ce-b333-3c71-aa12-08fa68db7b9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl
X509v3 Authority Key Identifier:
keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
sbgp-ipAddrBlock: critical
IPv4:
209.124.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:15:3b:ba:a0:88:f3:d0:f5:7f:26:ae:0d:d5:59:02:83:6c:
dd:4a:fc:25:40:63:de:52:8c:bc:2a:57:ff:26:21:5d:9a:1f:
38:fa:c5:e7:bd:7c:ba:09:af:31:39:2a:ca:3d:79:c5:10:a4:
19:ff:33:c2:b0:6c:1d:f2:46:27:2a:7d:4c:23:ee:ef:ff:e9:
92:44:c0:70:86:b1:91:78:15:bd:f1:15:09:28:5d:69:7b:a6:
7f:d0:8c:58:ae:c5:e0:81:cb:25:f4:74:82:aa:c6:73:24:58:
16:b8:88:b7:69:6f:ff:a3:52:91:0b:c7:c9:71:05:46:38:75:
da:a3:01:92:2b:8d:39:c3:dc:c7:23:9f:d5:fd:41:fb:5a:49:
2a:d4:98:dc:39:6f:a6:ea:a8:ed:34:95:20:98:83:cf:4f:d2:
24:82:03:1c:2a:00:82:7b:59:53:32:e2:47:25:1e:ff:e2:ba:
ef:94:ac:ae:40:e9:15:1f:e0:fd:e4:af:b4:86:7d:64:d5:2b:
51:87:ad:70:b2:e7:e0:ba:c3:b1:be:9f:ce:fc:03:b7:82:ca:
1e:24:f7:95:42:9f:bf:ed:04:c7:aa:be:a5:6a:cb:b3:0a:b5:
fa:9f:7b:d0:5c:8a:9a:4e:e7:a1:5d:fb:bc:ba:e4:4f:69:16:
f4:ed:31:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:51:36 2025 by rpki-client