Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/9085b4dc-4e06-3c72-a680-8a3e7602f71a.roa
File: 9085b4dc-4e06-3c72-a680-8a3e7602f71a.roa (raw, json)
Hash identifier: fWNAXOdHvqWcJZkJdTgKcwITYSm4lB6og7TVqvwFQHE=
Subject key identifier: 56:DB:1E:D5:E1:5C:7C:34:10:49:57:C5:1E:5E:C7:0E:24:C3:10:D6
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285849278DADFB8E157A5980F3E950
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/9085b4dc-4e06-3c72-a680-8a3e7602f71a.roa
Signing time: Tue 11 Mar 2025 16:55:49 +0000
ROA not before: Tue 11 Mar 2025 16:55:49 +0000
ROA not after: Mon 09 Jun 2025 16:55:49 +0000
asID: 14315
IP address blocks: 209.178.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:27:8d:ad:fb:8e:15:7a:59:80:f3:e9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Mar 11 16:55:49 2025 GMT
Not After : Jun 9 16:55:49 2025 GMT
Subject: CN=b3f91d43-59da-4947-be28-34f5bd5c381e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:43:fb:af:d0:d5:4f:36:8c:2d:02:f5:36:
47:58:e0:e6:8c:44:7d:1e:90:a8:4c:50:dc:6f:c9:
7d:33:65:a3:f7:a6:e3:57:c4:9a:c5:9c:24:35:b8:
6a:1a:da:79:6d:88:2a:46:6e:23:c1:3a:91:76:bc:
b7:3f:f8:74:b2:99:11:24:fb:2c:15:24:ff:43:1b:
8e:b7:f2:ab:76:3b:fc:51:26:3e:83:c6:81:63:61:
1d:49:75:4b:49:a6:d5:fd:4b:42:5d:9d:a4:cb:aa:
01:f9:ed:55:d5:a1:88:c9:f0:1d:ce:e2:48:b5:86:
8b:55:0c:e9:cc:e4:5e:53:4a:48:bb:94:26:a8:3f:
57:ac:a2:5f:75:e8:00:6e:33:be:b2:8a:c4:f6:3c:
57:c5:39:8e:18:80:7e:8c:3d:a0:fc:03:a5:a3:b8:
d4:50:40:58:98:ef:a9:96:51:3a:c7:e9:ac:6c:06:
96:af:25:a1:c7:19:a2:df:cf:86:88:3e:66:dd:dc:
b2:ab:7b:6d:b0:9b:4e:b1:b9:09:16:3d:98:1a:bc:
06:6f:4a:07:87:4d:c0:05:15:0d:34:2c:2f:08:bf:
0d:09:57:18:04:3e:74:88:07:98:93:6b:34:a7:14:
5d:ca:89:91:41:51:0c:f8:5f:f6:00:f6:9a:df:ed:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DB:1E:D5:E1:5C:7C:34:10:49:57:C5:1E:5E:C7:0E:24:C3:10:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/9085b4dc-4e06-3c72-a680-8a3e7602f71a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
209.178.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:ee:8c:fa:1a:b0:b5:54:32:56:a0:0f:cb:d5:ee:6b:86:f3:
60:7e:2f:da:85:fa:9a:55:d0:ba:a8:fa:b9:42:87:12:43:ee:
3a:ed:93:c8:09:d2:2f:c3:64:1d:55:47:3e:57:7a:65:34:85:
7b:2b:44:52:db:14:45:16:05:35:51:37:74:21:5e:0e:5e:82:
47:c0:66:bc:19:c4:6d:24:5f:d5:e9:2a:5e:bd:bd:a9:74:7f:
a6:3d:fd:6b:03:52:cb:a4:96:26:00:e6:cc:76:4f:1f:65:6b:
a3:ba:68:6b:a4:8c:c4:40:3f:8c:ee:27:b6:09:24:bd:d0:8e:
ad:72:5e:fe:c4:92:4a:19:b4:73:55:85:8a:1d:0d:01:c3:de:
88:4b:7d:f4:95:8d:75:29:28:09:af:41:94:14:ef:bf:17:12:
e9:68:cd:68:f3:05:e7:6f:71:85:e7:43:ad:7c:ea:d3:60:88:
34:50:84:cf:23:d1:dc:83:01:86:09:0e:5e:27:bf:95:9d:53:
7d:db:51:d5:19:56:a2:11:7a:48:77:85:b7:da:7a:00:bd:2e:
b7:44:40:22:a2:fc:b0:aa:26:82:f4:92:c4:67:31:95:4e:78:
cf:21:b3:19:c5:1c:29:e7:09:4a:2b:93:1d:ce:09:b0:be:75:
01:3b:a1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:30 2025 by rpki-client