Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/73e5f0c1-5f88-3fe9-a5a1-ff2545640afa.roa
File: 73e5f0c1-5f88-3fe9-a5a1-ff2545640afa.roa (raw, json)
Hash identifier: VVdK8lYD+fYFx0cTFjKgAKnY1MDl0XkzTo97cZzmByg=
Subject key identifier: CE:C0:97:2A:8E:C8:30:3B:7F:E3:74:D2:D4:FD:60:E7:58:FC:11:0D
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584886B07BD33CA922A4A8EF8540
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/73e5f0c1-5f88-3fe9-a5a1-ff2545640afa.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 271
IP address blocks: 209.87.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7b:d3:3c:a9:22:a4:a8:ef:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=c45e3fb1-85fc-42dd-960e-1a23562337b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:27:2f:08:b7:25:6a:56:b8:0e:29:e8:32:
ec:22:08:31:5f:e0:c0:c7:a7:74:79:3a:1f:b6:84:
e4:e9:61:73:6f:0e:41:c4:45:97:a2:87:b4:29:b6:
2d:4f:69:61:3f:76:2d:e0:44:a3:da:9e:b3:31:01:
91:b7:3d:f2:f1:cb:49:8c:81:9d:17:05:03:f3:25:
dc:ed:ef:b9:df:80:d5:38:e3:35:ac:a9:e5:72:4a:
18:e0:90:4b:c2:cc:5e:17:4a:f1:cf:49:8d:3b:63:
72:46:30:b9:e8:f5:e2:e8:8a:50:ad:7a:03:43:bb:
46:56:ed:ff:c6:46:62:32:dc:bd:3b:e3:e2:64:e8:
3b:ee:30:fd:e9:82:39:0f:07:20:f3:66:77:73:6c:
56:97:af:63:61:7a:6a:ab:13:f1:7f:10:49:cc:d9:
89:b2:08:f0:46:51:c1:6d:52:92:31:01:b0:8f:a4:
13:d8:16:0f:cd:48:3f:00:cc:d9:4f:e2:85:5b:80:
81:d0:05:d2:07:49:d0:77:f3:9b:63:31:e4:da:f9:
da:e3:bd:a5:e3:15:9f:44:21:bb:84:b3:ed:1c:1f:
27:39:3b:f5:96:01:3e:e2:07:b2:3d:02:b1:f1:c5:
89:59:bf:a6:82:87:b8:f2:7f:4b:97:98:02:8d:df:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C0:97:2A:8E:C8:30:3B:7F:E3:74:D2:D4:FD:60:E7:58:FC:11:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/73e5f0c1-5f88-3fe9-a5a1-ff2545640afa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
209.87.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:26:03:ce:54:db:ff:5a:16:fb:ea:5b:91:c5:b5:9f:ed:ae:
9b:ec:e5:35:76:91:28:d7:fb:6a:1b:0f:77:7a:3f:8c:1f:d1:
0b:01:4e:69:a4:db:11:9a:7f:6f:f7:2e:4d:7e:4f:a3:bf:71:
1d:81:62:45:f7:d6:34:94:66:32:7f:f2:01:40:2e:ee:a2:1b:
47:72:4e:c7:44:02:3d:bf:b3:b9:c1:df:f9:be:9a:20:b1:90:
98:c5:74:47:d2:42:4a:e1:9f:73:b9:5c:46:65:86:04:c5:7f:
85:4b:37:15:8b:29:f2:99:bc:7f:61:95:17:04:8f:d0:57:b9:
1e:0c:99:94:6c:7a:da:22:45:1d:8e:e8:b3:1e:91:11:1b:38:
ee:ec:65:89:ba:24:d3:a3:7d:74:4a:81:00:b2:d0:4d:c7:60:
fd:96:c1:ae:39:52:82:f6:38:8e:95:d9:fa:e2:56:29:c6:8d:
dc:ef:14:05:fd:58:cf:b7:42:be:14:77:ed:20:e1:b9:2d:6c:
90:75:fc:a5:00:db:93:8e:ae:8a:e3:79:b0:9e:2b:ac:4a:98:
e7:6f:76:5b:5f:a4:76:c6:9d:1b:23:a5:7d:b2:34:66:dc:f7:
91:9d:14:51:b4:d3:f1:2e:49:ad:5f:92:24:04:3d:ef:36:11:
17:7c:71:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:54:59 2025 by rpki-client