Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/08efbae2-5477-331b-b473-38399917c289.roa
File: 08efbae2-5477-331b-b473-38399917c289.roa (raw, json)
Hash identifier: JoOwueivT7EbOsUPysPmQaUcBQijdHatASwl2nnsNS8=
Subject key identifier: D9:21:34:3F:41:B1:DE:2C:92:7D:8A:93:EA:81:45:B2:F5:6A:8F:36
Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Certificate serial: 010D0C9F43285848BBBB7979C80D63B44EF9A350
Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/08efbae2-5477-331b-b473-38399917c289.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 14325
IP address blocks: 131.109.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:79:79:c8:0d:63:b4:4e:f9:a3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=59960e71-f9b3-4b4f-9005-a9a96be4b584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:ab:b0:38:d1:8c:b5:3f:56:03:29:39:9b:
3a:03:c9:d8:7a:90:69:9e:49:bc:97:ba:38:a7:46:
39:57:a1:6f:0c:c0:67:58:40:2d:0a:bb:53:ee:6f:
bf:12:d5:40:39:7a:2d:70:ca:8c:a0:fd:ef:a3:48:
cf:75:31:f3:72:fb:8c:df:d3:85:3a:ad:28:e3:3e:
c0:ef:7a:d8:70:ba:aa:07:2a:d6:4d:5c:7a:17:21:
b8:30:e1:4a:f1:bc:65:44:2a:98:a0:84:7a:a0:a8:
93:62:3c:9c:a1:7e:90:d0:84:1e:42:f5:af:e0:7f:
fe:4f:2e:ef:dc:fb:e4:ba:3c:32:de:ab:11:a3:00:
33:ac:fc:0d:da:f2:a7:38:0c:69:1a:ce:de:61:af:
ac:e7:4c:ec:c0:d5:5c:57:58:d5:a2:8e:17:34:9c:
ed:5f:71:28:3d:f2:8b:07:3b:9f:c2:88:4e:7f:e4:
76:9c:b2:10:46:91:63:d0:e9:6f:55:7e:4f:64:0b:
95:b7:df:5b:a0:8d:66:c6:82:fd:34:81:3c:43:ae:
7d:17:f6:cf:1c:bc:e3:57:d0:58:3e:0c:f0:14:a4:
99:e7:67:8e:56:42:ee:03:7c:ce:dd:c4:7b:f3:b8:
7b:37:fd:70:fb:1b:e8:2c:d1:65:e8:ba:4e:e6:4f:
ed:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:21:34:3F:41:B1:DE:2C:92:7D:8A:93:EA:81:45:B2:F5:6A:8F:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/08efbae2-5477-331b-b473-38399917c289.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl
X509v3 Authority Key Identifier:
keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
sbgp-ipAddrBlock: critical
IPv4:
131.109.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:f5:78:1a:89:8d:db:49:5e:3d:5e:aa:62:f3:38:ab:31:a2:
95:39:68:66:2e:b1:31:be:0e:c4:b5:d8:18:35:77:a8:b7:98:
1c:76:18:68:90:3c:ce:77:9e:1f:52:1a:ac:d3:52:6c:5b:94:
7b:41:0c:90:af:c8:32:10:00:0b:0c:69:21:39:c5:25:83:8f:
15:0e:e9:de:be:17:e3:99:ab:70:3f:48:e2:7d:62:2e:c7:43:
cf:8d:e8:3f:6c:be:77:3c:0f:02:14:7f:7a:03:12:9e:d2:d6:
67:84:5a:66:17:e6:bf:3f:a0:c0:6d:aa:10:49:fd:d7:8e:78:
b8:3e:cf:df:48:5d:d6:fa:76:6c:8a:56:9c:1e:87:8a:58:26:
a8:9e:e5:0b:24:a2:c8:b4:b0:c7:6a:84:7f:82:5b:05:64:38:
c8:c7:c0:63:7b:81:2f:11:b8:ee:5f:79:ce:b8:81:b5:fc:ec:
bc:77:e9:ab:eb:2a:64:1f:76:48:02:d4:d1:9e:00:c2:29:d0:
0a:aa:8c:8e:7b:d6:9b:a8:1a:ba:92:d3:91:d5:1b:a3:55:8e:
77:e0:7e:59:53:70:42:b3:de:71:c8:f3:19:a1:39:39:5a:20:
84:d6:c5:50:0e:66:db:4e:e5:f0:96:13:c3:20:68:1a:00:34:
56:e2:88:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:35 2025 by rpki-client