Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa
File: 1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa (raw, json)
Hash identifier: ySJkHb+ySA3jVVxQW1PkzOmXaciLB8ejI4vRiIYl1KI=
Subject key identifier: 78:25:5C:26:E7:DA:C6:06:1F:B2:F5:5D:CE:16:2F:A0:BF:6B:E6:9E
Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663
Certificate serial: 010D0C9F43285848A830B2C3971BF64C28260B00
Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 8075
IP address blocks: 209.143.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b2:c3:97:1b:f6:4c:28:26:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=a0640963-93d9-4958-9468-22fb417a8323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:cf:b4:b1:9a:aa:ff:ec:d5:d4:d7:0f:90:
da:01:4a:31:95:af:cb:05:d9:c8:3b:63:9f:ec:88:
8b:59:79:d7:57:f2:6e:ed:cc:f6:be:b4:56:13:33:
5d:31:92:0e:97:ad:30:2a:94:de:e2:27:3e:c3:8e:
b2:45:66:00:b5:78:b2:bf:e0:18:a8:32:ca:66:b2:
8c:06:29:26:e9:2c:04:bb:1e:05:fa:da:46:28:b7:
4e:94:7b:af:29:fe:16:cc:0d:d7:8a:13:81:2f:34:
07:16:bb:3b:d3:d9:db:0d:8a:7c:71:b4:34:c6:d1:
4c:b1:41:cc:84:2b:76:fb:c9:0c:e8:a1:57:7b:da:
15:70:2f:50:1d:6d:1a:26:e0:80:bb:4e:ab:d7:ee:
fa:1f:b3:32:1d:c2:00:2b:02:16:a4:9d:d1:9f:b2:
49:c2:4e:2c:4a:89:8f:be:b0:a9:55:74:b5:ed:6b:
95:1b:b8:aa:4f:1b:35:47:e1:37:ef:94:21:3c:54:
5d:e4:7a:c4:08:23:4b:63:bd:d9:13:bc:35:26:1c:
3e:76:4c:7a:8a:78:89:29:b5:f0:7c:95:da:95:bd:
92:bd:dc:a0:32:66:45:15:21:1d:9a:37:f8:c3:b6:
49:b4:d7:d2:5f:9c:d7:72:68:ee:7b:ae:ee:c3:7e:
76:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:5C:26:E7:DA:C6:06:1F:B2:F5:5D:CE:16:2F:A0:BF:6B:E6:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl
X509v3 Authority Key Identifier:
keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer
sbgp-ipAddrBlock: critical
IPv4:
209.143.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:02:3d:3e:fd:c6:da:4c:10:e1:1d:df:c9:47:ef:41:ad:da:
ce:3a:10:5c:f3:d9:4d:6b:27:c2:e8:65:3f:dc:4f:ca:b0:11:
e1:a6:21:4e:e2:d1:fc:be:63:7e:74:9b:88:91:cd:28:b0:c7:
fa:ba:6a:dd:3b:d2:74:ee:87:a1:1e:29:a1:d7:ae:49:7b:47:
49:91:23:7d:94:f8:c2:7e:f4:b2:f5:6f:a5:88:0b:5b:50:91:
42:df:0d:e3:e0:92:53:7d:e7:43:3d:34:a0:91:94:5d:3a:97:
09:e2:62:b5:f9:cf:c2:ca:8c:e3:02:38:21:69:5b:da:9b:c5:
7e:70:f8:f0:51:e2:78:79:89:81:c8:51:57:bc:df:23:b5:35:
64:cc:29:5a:9d:c5:bf:5e:5e:d6:7b:a6:64:27:41:ed:0b:2c:
d7:c8:0f:05:e4:87:74:22:02:54:32:c1:84:99:39:22:68:e1:
7c:00:6c:02:bd:2e:ae:68:34:9d:34:97:b4:c9:9b:12:2a:40:
fa:16:0a:27:a2:2c:df:a5:fc:30:a2:bd:79:d9:48:4a:d2:25:
96:e7:d1:03:70:f7:90:10:45:49:6b:4c:85:ab:64:25:62:e9:
75:e1:58:1a:ec:a0:e9:45:56:47:05:f1:c3:9b:d4:a8:7e:a4:
20:ef:b9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:47 2025 by rpki-client