Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/02494130-00b8-32e4-98d4-c3f694195769.roa
File: 02494130-00b8-32e4-98d4-c3f694195769.roa (raw, json)
Hash identifier: /svOYKK2HGnqxnBr14IaYLYZhNkcSPRdQaGX8uhtcwc=
Subject key identifier: BC:E5:D2:B4:7E:1D:EE:70:54:2F:BA:99:8C:A4:FC:DC:A2:4B:04:1B
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F43285848828094C7D618C0ACE62E5B00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/02494130-00b8-32e4-98d4-c3f694195769.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 11105
IP address blocks: 209.87.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:94:c7:d6:18:c0:ac:e6:2e:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=dd7d9875-6414-4b82-927b-976c9eccd409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:d1:bc:40:01:c1:a1:00:6f:15:41:25:7b:
f1:92:b4:7c:22:71:04:63:65:4d:82:cc:9d:0b:2a:
f7:b9:cd:81:d0:8e:05:a7:57:f7:33:82:f0:21:96:
c1:16:c5:47:d1:c5:70:d3:ac:43:6e:0a:ef:72:95:
09:f6:61:83:7f:5a:42:fe:53:0d:1f:d5:86:b9:da:
dd:6c:0a:25:15:22:4d:bc:e6:f3:b2:71:a7:bc:8e:
db:94:95:12:7b:b3:99:45:dd:16:a0:f4:66:b4:bf:
38:d2:56:44:d6:e7:4c:98:03:71:92:b3:31:36:38:
82:f1:52:82:a7:1c:31:39:ab:09:e5:02:e4:74:7f:
eb:bc:87:b4:8e:bf:6f:f2:15:45:a6:93:d9:e2:06:
f0:68:e0:8c:90:06:6f:02:55:b8:c3:43:3e:8e:c3:
0e:26:a6:9d:32:50:34:7c:e4:33:1a:ab:91:19:c7:
e9:f8:70:11:de:32:55:85:28:b3:53:b4:4e:20:41:
c2:57:b0:f1:bc:3a:38:2b:f4:80:54:7b:82:8e:8f:
ba:1c:ef:29:03:19:29:32:eb:40:51:20:f2:91:b3:
05:b9:4f:48:d3:00:77:99:e2:d1:13:bf:f1:c7:20:
85:d7:a6:83:f8:14:0a:df:a6:d1:5e:e5:49:1a:28:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E5:D2:B4:7E:1D:EE:70:54:2F:BA:99:8C:A4:FC:DC:A2:4B:04:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/02494130-00b8-32e4-98d4-c3f694195769.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
209.87.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:ad:81:c5:35:82:ee:7a:f4:71:b5:04:85:19:16:14:32:38:
e2:1b:ae:bb:59:7c:17:00:6a:bd:05:c1:45:79:fc:f2:00:ec:
a0:ed:df:c5:6a:a9:04:78:d5:fa:6d:e5:61:9a:68:cc:20:ed:
28:a1:3b:25:44:b8:ff:4f:14:fc:aa:12:8f:d8:5f:16:89:99:
eb:5b:35:86:ce:c6:f6:25:0f:a8:4a:8a:8f:a4:1c:c3:a5:2b:
54:c1:0e:8e:da:ac:77:82:75:8a:52:29:8a:37:12:e1:98:59:
34:08:88:c0:f4:57:b0:d6:bb:e8:76:5d:df:3b:97:95:ae:4d:
57:8e:0f:fc:10:d5:9f:83:6d:88:3c:c1:cc:09:90:42:24:20:
31:79:e3:50:ce:f9:de:b4:be:9d:f6:85:d1:db:b6:eb:1d:11:
4f:e4:9e:86:29:36:80:6e:be:94:2a:a0:4e:47:d7:02:05:c8:
ed:fc:72:7b:e7:bd:34:99:80:39:03:4a:87:64:20:7c:47:5a:
8a:c6:ab:69:64:95:a8:ab:a2:18:16:b4:0d:ae:9a:1a:e2:dd:
be:cd:fd:dc:db:71:bd:6d:d7:4d:cb:d9:19:d6:95:67:46:35:
19:8b:4d:6a:cb:d1:55:e8:f7:68:a3:03:de:3c:d0:b0:1c:22:
30:6a:9c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:34 2025 by rpki-client