Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9c22c93f-e1f4-3d75-a769-2eb4b6883a20.roa
File: 9c22c93f-e1f4-3d75-a769-2eb4b6883a20.roa (raw, json)
Hash identifier: XH1whktumR9z9lvL2//Kf10N5LKrslP5H2fEsO7Vfeg=
Subject key identifier: AF:E7:1E:2C:CB:44:8C:94:94:E0:18:F6:23:9A:F6:99:A3:59:F9:7F
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F43285848FBF12C216DE01A8C9FDACF00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9c22c93f-e1f4-3d75-a769-2eb4b6883a20.roa
Signing time: Mon 24 Feb 2025 02:00:38 +0000
ROA not before: Mon 24 Feb 2025 02:00:38 +0000
ROA not after: Sun 25 May 2025 01:00:38 +0000
asID: 271
IP address blocks: 209.87.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fb:f1:2c:21:6d:e0:1a:8c:9f:da:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Feb 24 02:00:38 2025 GMT
Not After : May 25 01:00:38 2025 GMT
Subject: CN=f4e04d33-b813-493f-8e02-40bf07f7e77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:7b:17:6c:05:69:44:3c:d7:eb:70:f9:07:
c7:86:1d:7b:9b:fa:72:71:5c:e0:45:66:94:77:77:
19:75:ca:58:2a:d9:24:08:4d:a8:54:75:69:91:1e:
b2:b2:57:c9:b6:5b:f2:7f:b2:87:8d:c8:b6:38:a2:
cb:e4:a9:4d:79:dd:36:3b:8b:44:1e:b0:04:e1:50:
47:3f:e9:37:5c:87:33:93:78:30:a7:7d:a8:c8:1c:
a8:1c:c9:5f:ef:27:be:df:0c:04:2a:db:2d:d9:5f:
5e:91:8f:dd:cb:90:8b:43:9f:2d:46:8e:47:6e:df:
45:e7:6a:b2:21:b9:df:93:9d:78:d6:b6:8f:c1:d5:
85:55:cd:b9:ce:e4:e8:55:f0:68:1a:d5:08:a2:2c:
07:fc:f3:eb:54:2f:34:fc:cd:72:2e:48:8d:1b:7f:
1a:e8:99:a0:fd:74:0c:05:ef:b8:5d:d8:65:67:23:
c6:51:42:93:5d:7f:59:da:da:ab:49:52:3d:e4:89:
98:32:ea:1e:9a:ab:8a:9c:da:1e:53:ae:19:0d:75:
ca:af:9e:92:6b:1b:83:ce:99:3c:9b:38:12:e2:be:
e9:cb:d4:d4:ae:37:10:05:27:4e:5f:1d:47:81:f3:
61:7b:c8:bc:cf:62:0c:c6:b5:0e:bd:b4:c1:5a:35:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E7:1E:2C:CB:44:8C:94:94:E0:18:F6:23:9A:F6:99:A3:59:F9:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9c22c93f-e1f4-3d75-a769-2eb4b6883a20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
209.87.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:d9:4c:31:80:20:20:cc:28:5f:fe:1e:36:b0:ed:49:48:b8:
62:6a:30:3d:c6:b0:42:fd:97:92:43:b0:34:3a:dd:ac:c3:0e:
04:c2:9c:aa:4d:41:67:21:7a:1a:b0:d8:0e:6b:ec:90:48:cf:
e1:f9:28:98:03:57:70:5d:d2:9d:33:dc:bd:36:8c:e9:c9:bf:
70:3e:f9:09:39:a8:70:44:47:5f:6c:c8:f1:44:df:29:2f:14:
ea:26:52:75:9c:e2:45:6b:3b:7b:5e:e2:8c:de:b9:f9:7a:e7:
11:0b:2b:06:cf:f1:aa:c4:1f:9f:20:02:d8:8b:a1:37:75:db:
87:d2:8e:21:f3:da:9b:21:75:bd:95:7f:dd:fc:91:63:c7:4f:
18:44:16:e6:e1:e9:4e:e9:13:62:9f:4f:6f:cd:5e:55:44:b2:
5c:f5:3c:ea:3b:55:a6:22:24:d8:95:41:08:78:54:ee:7b:c8:
f6:44:62:e1:93:8d:29:55:55:c8:27:05:ea:22:1d:82:e6:af:
5b:f0:5f:c2:41:88:55:f2:ad:7b:36:88:43:9c:74:a8:0c:8f:
b2:86:ce:36:90:77:46:61:52:f3:ef:11:db:00:5b:29:60:2d:
c2:e9:02:ca:c0:c8:51:1c:62:81:3c:af:57:3a:33:55:57:5a:
4a:7d:2e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:50:59 2025 by rpki-client