Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/a00e1f15-edb2-3c13-b022-338fbe6d0327.roa
File: a00e1f15-edb2-3c13-b022-338fbe6d0327.roa (raw, json)
Hash identifier: cPXVHtiZnEA1oYBYwnuGjMz3YJJdygWNA7GWmRSq7IU=
Subject key identifier: 35:0C:14:C6:ED:F2:4C:DE:C9:7A:68:81:6F:A8:7D:FF:87:9B:C5:6B
Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663
Certificate serial: 010D0C9F4328584921840CCEB4F625C3CA0D8740
Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/a00e1f15-edb2-3c13-b022-338fbe6d0327.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 8075
IP address blocks: 209.143.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:0c:ce:b4:f6:25:c3:ca:0d:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=c91c9811-6c02-48c1-9f5b-a73310d4345f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:66:1e:58:ea:ec:cb:3e:39:69:aa:a4:aa:57:
a4:24:9e:2d:de:f8:58:71:13:29:10:6c:ea:1f:b6:
03:85:a1:9d:8e:3d:96:f4:ca:eb:99:79:18:26:c2:
3b:cc:f4:1a:cc:23:55:a9:f9:cb:95:1f:29:23:ea:
55:02:cb:49:9a:eb:6b:41:5b:45:26:33:3c:61:7b:
c1:d3:e7:d3:e6:bb:04:3d:c0:da:cc:b4:65:71:c8:
59:e5:b3:61:35:5b:70:a3:d7:f6:3e:96:77:ac:d5:
f8:7d:52:50:e5:b1:a7:ab:e1:32:09:f1:fc:af:cc:
fd:7b:57:37:5e:74:5a:2b:e2:cc:53:27:05:33:dc:
6b:3f:69:01:2a:87:11:42:11:01:11:f5:28:75:02:
89:c5:1d:ea:88:46:61:69:50:56:75:55:ae:51:ac:
9b:af:62:05:a7:09:68:a2:0b:c0:cc:4a:96:43:05:
71:1a:d3:f9:41:aa:b8:71:19:c1:b2:b6:36:b1:17:
44:9c:7e:10:61:bb:82:60:73:ac:ad:a5:55:2c:b7:
54:e1:57:ea:e1:be:ed:40:d0:9a:e3:3d:ed:2b:49:
f9:6c:6e:6c:c9:01:ba:33:c9:a7:84:27:a2:94:ab:
12:b0:d8:21:50:a5:01:29:d9:af:14:10:3d:b7:d0:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0C:14:C6:ED:F2:4C:DE:C9:7A:68:81:6F:A8:7D:FF:87:9B:C5:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/a00e1f15-edb2-3c13-b022-338fbe6d0327.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl
X509v3 Authority Key Identifier:
keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer
sbgp-ipAddrBlock: critical
IPv4:
209.143.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:13:c0:e3:9f:a9:75:8c:55:0d:d7:f0:e3:42:e3:64:23:ff:
87:a5:b3:b2:43:47:9d:11:0d:4f:e3:28:67:34:1b:c4:32:05:
41:39:56:db:d4:79:db:ec:3e:3c:8a:59:31:80:53:71:32:30:
16:19:a6:f3:21:d0:fe:b4:f2:b8:26:47:b0:80:be:1d:22:68:
4e:6a:27:45:97:72:5b:17:2a:8f:cc:42:d3:00:59:e6:fc:1f:
87:8a:e3:d5:d8:b5:37:f2:da:27:14:a4:8f:3c:28:6a:55:64:
e2:6c:f1:ec:4a:b4:d3:21:15:cb:03:b7:ae:27:66:5e:ae:dd:
75:e7:da:26:d7:0e:63:e5:36:32:1e:26:7c:95:d2:91:50:0b:
94:f7:ea:2d:60:8b:28:ea:89:ac:f1:61:24:71:06:4b:82:8e:
75:59:fa:a2:b8:12:7f:e2:c7:89:1e:e0:35:5e:f0:b0:fd:18:
5e:7c:d3:d5:a4:a8:9f:25:e1:26:b0:43:c1:81:c6:96:84:29:
5c:81:81:90:21:a1:d9:17:c7:9e:20:99:cc:d8:f2:f9:a9:20:
13:9c:43:39:9a:22:48:38:37:c7:7b:4f:d1:d8:7e:08:d1:27:
2f:46:01:20:66:05:fc:69:2c:64:33:0e:a8:5e:70:6e:e7:1e:
7d:94:e2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:39 2025 by rpki-client