Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa
File: 4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa (raw, json)
Hash identifier: W3zjo2F0yshd/v9PF2V9SqqrwiDUsrpIWkHNtjc4hhg=
Subject key identifier: 02:8A:D8:76:95:03:68:0B:13:F0:1E:BF:BA:01:26:D2:25:04:C0:FB
Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial: 010D0C9F43285848ADC60D5BF3D3FE4F1275BF80
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 14618
IP address blocks: 209.169.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:0d:5b:f3:d3:fe:4f:12:75:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=f961e490-de72-4279-b334-f334d666e1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:72:49:69:d9:ab:78:17:30:5e:a8:a1:fd:
a2:d9:d4:3d:6f:d3:06:38:05:78:b9:68:e8:e6:4c:
b3:c0:47:34:09:1e:08:4a:c0:c9:fd:34:aa:c9:4f:
b0:2f:a4:3e:fd:bd:fb:54:3b:3d:fd:74:e0:18:15:
c4:23:fd:62:0a:d9:3f:0e:12:79:1f:98:16:b0:85:
a3:8f:8c:25:dc:6f:ed:1f:a6:6e:cf:b7:4d:cc:ab:
14:18:f2:55:df:87:9d:c3:a0:a2:dc:b3:cc:c0:7b:
89:e8:df:ce:6f:68:8c:eb:dc:92:f6:80:37:8e:0a:
1f:ba:32:ef:9b:40:bb:f4:ca:9e:28:6c:50:0a:05:
59:70:c7:82:b7:18:cd:0f:28:1b:82:7f:6d:62:bb:
d8:b4:da:99:79:92:ef:cd:ff:de:69:17:45:74:11:
13:95:97:83:33:66:df:14:2f:29:3e:ee:05:68:ae:
63:f8:c2:b0:f6:90:8b:e7:2b:02:27:3c:ad:b7:fc:
01:a1:d9:1f:8e:f0:5b:fc:2b:98:d2:a3:0e:25:e5:
92:0a:16:e4:01:16:0c:19:eb:73:c7:ce:39:34:f4:
44:43:45:26:85:02:20:0d:b4:05:e7:fd:ce:3a:97:
a8:10:5c:7e:57:bd:1b:f6:5f:cb:3a:53:10:e0:6e:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8A:D8:76:95:03:68:0B:13:F0:1E:BF:BA:01:26:D2:25:04:C0:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/4d4d5c9e-a470-3d19-ade9-b50bd45be3ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
X509v3 Authority Key Identifier:
keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.169.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:5f:97:2f:44:ef:71:65:b5:d1:50:7f:5e:06:b8:b4:72:ea:
fe:37:f4:e7:0b:da:d9:93:bc:5e:95:1b:35:0a:f4:2e:c0:05:
a7:ee:c4:39:85:a6:12:8a:7c:a7:07:00:c5:ba:3d:1b:da:55:
4d:d2:77:e7:51:48:d3:06:48:9c:9d:82:51:16:ad:8a:7c:4d:
66:9a:af:a6:5b:17:7f:d0:bc:4c:29:13:82:d3:3d:6c:4b:97:
1b:15:ea:c8:b3:9c:69:a4:15:9f:e9:7f:7b:fb:6b:7f:d8:ee:
b4:1b:2c:a9:65:1b:55:5e:10:6f:70:cc:65:13:1e:99:55:98:
7b:21:13:0c:92:a8:17:fe:f4:bc:89:e1:b2:84:35:54:72:44:
d3:83:34:8a:7c:62:d6:40:0c:6a:8c:22:70:5f:31:d7:55:3f:
11:50:7b:3b:b1:2b:37:c8:29:42:de:69:e8:24:e2:b8:7e:b4:
10:8a:fe:0b:61:f3:a2:6e:71:1b:29:11:b3:03:16:5d:81:cc:
62:97:17:e5:8d:0c:e7:92:1a:32:b7:03:09:3d:24:d5:01:a4:
8f:21:56:59:9c:49:3a:00:9b:76:7f:81:5b:aa:0d:9a:e3:6c:
c1:4f:35:1c:f8:46:ce:e9:b8:42:68:f8:fe:b5:a4:68:21:e4:
49:86:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:11 2025 by rpki-client