Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa
File: 4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa (raw, json)
Hash identifier: bvx5NzQv6zbvGUIrFHh+2ij8tkPzVyn94+eYY9ACZ7M=
Subject key identifier: BF:B9:5B:0F:86:1D:FD:C8:86:8F:69:90:44:12:64:9E:C0:0D:2A:8C
Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663
Certificate serial: 010D0C9F43285848A830B2B694736E008EDF8D00
Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 8075
IP address blocks: 209.143.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b2:b6:94:73:6e:00:8e:df:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=ccb7cb06-74a4-4dd3-af1b-a774140d7da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:6f:5d:b5:64:46:fb:00:0e:22:f5:77:0a:
c1:50:cf:4f:01:29:5c:5c:2c:e8:d6:b2:31:39:8f:
d2:cb:b2:20:d7:ae:ab:18:94:d8:19:31:95:a6:1c:
3c:11:76:b5:9e:c0:16:2f:76:af:d2:26:b8:6e:f1:
9b:74:fb:7c:01:ad:76:1d:24:5f:14:ed:b4:c8:5c:
6e:9a:72:00:22:b3:a7:01:5a:df:a5:1b:95:7a:1b:
76:08:31:5d:18:43:74:9f:88:9b:a5:fb:f2:c8:6c:
e0:57:47:8f:d2:97:1f:35:a0:a6:5d:19:50:17:88:
7d:3c:f1:53:54:5e:a2:7b:c8:af:04:28:01:e5:f7:
25:9d:55:85:7f:0e:49:e0:d4:37:e1:78:b3:94:30:
5a:54:ce:02:16:2f:eb:40:e6:6c:ff:64:2f:80:64:
64:6a:bc:a6:59:22:be:75:84:8a:f3:29:58:18:65:
1c:9e:1a:ce:c2:d7:02:c7:7f:c8:e8:f9:e1:b8:cd:
d3:b1:f0:10:ee:dd:eb:05:25:d2:48:8b:91:10:28:
f2:8a:a1:29:be:eb:74:3e:ab:02:e4:e3:54:40:27:
9b:8f:89:2a:6c:a3:a2:78:8a:3f:07:b0:c3:75:18:
35:af:bf:48:10:00:57:f5:10:f9:63:f1:e0:55:66:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B9:5B:0F:86:1D:FD:C8:86:8F:69:90:44:12:64:9E:C0:0D:2A:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl
X509v3 Authority Key Identifier:
keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer
sbgp-ipAddrBlock: critical
IPv4:
209.143.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:b6:dc:b1:e6:6c:cd:3f:11:9b:6f:52:69:4d:00:a1:6e:31:
55:0c:0c:87:c2:06:58:30:79:6e:be:6e:fe:3c:05:e3:2a:ec:
90:60:a4:93:f9:8e:f7:79:92:8c:bb:7e:f7:a5:28:95:42:ad:
d0:47:cc:8e:be:3d:41:95:b4:7b:96:4b:b8:89:aa:aa:7c:41:
3e:66:a1:3d:d9:48:ce:d0:22:6e:24:c7:3a:3b:96:aa:40:7e:
bd:1e:34:77:5f:75:a7:45:5a:a6:bd:b9:69:b7:1e:e8:10:af:
c9:e2:ba:4b:de:70:3d:a9:b2:66:1c:c1:1a:01:ab:de:a0:71:
2d:02:eb:a6:c9:d0:8d:72:3b:84:fe:e8:a0:0b:00:06:75:df:
d6:0c:53:ab:33:19:ee:77:5e:db:0e:11:8a:ed:f6:be:8f:1d:
9c:e0:62:61:c2:c6:8c:8c:64:19:8d:d6:67:48:88:ae:e8:85:
19:cd:e3:4c:79:98:88:56:6c:eb:1e:2e:4d:4c:08:99:8d:93:
1f:a7:1a:f3:d5:c2:7d:39:88:12:a0:23:d5:39:4d:ce:c8:bc:
98:84:71:68:49:25:16:2a:42:39:08:b8:67:86:0d:2d:f0:61:
42:9f:9d:ed:13:7e:b9:e4:7a:69:9a:61:a8:cd:88:bf:b6:04:
45:4d:80:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:23:44 2025 by rpki-client