Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/89bdd6d3-2f08-3833-852b-2137080307ad.roa
File: 89bdd6d3-2f08-3833-852b-2137080307ad.roa (raw, json)
Hash identifier: 00Wx0moBHFMDfUy/dDL0aZclEmHhNH/b8BgIBR2StjQ=
Subject key identifier: 96:AE:C2:D1:B2:40:24:FA:7F:40:A3:51:9E:48:A8:DA:38:96:80:6C
Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial: 010D0C9F43285848EC96A501FC7DDF279E545A00
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/89bdd6d3-2f08-3833-852b-2137080307ad.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 209.169.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:a5:01:fc:7d:df:27:9e:54:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=5ee32302-9080-42fd-b95c-b7324514dbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d7:77:a0:35:43:16:7e:70:e7:bd:93:c2:a4:
f9:bd:0f:19:4d:63:2c:b0:7a:08:2a:fa:2b:74:ce:
5f:05:87:01:66:6c:06:d8:2b:d1:11:f2:32:81:35:
e9:e8:9b:8f:94:77:ac:3b:b0:f8:4e:94:d6:c8:89:
d1:b2:da:0e:06:6f:82:2b:d5:c0:e6:2b:12:eb:75:
f8:4d:97:bd:fb:a2:78:7e:65:30:2e:80:27:c6:8a:
0b:e0:03:ba:b1:5d:ff:04:80:e5:b1:68:49:69:d0:
a9:16:e2:43:1c:9c:3b:3d:3d:9b:33:27:b4:ee:89:
bf:26:e1:e2:25:3a:d9:1a:c1:42:7d:df:3a:57:d5:
94:59:1a:2b:09:b5:dd:1c:00:05:bd:89:40:63:16:
c5:87:be:33:95:45:9a:97:5f:0e:c4:7f:22:90:b6:
39:a5:11:f5:e6:7b:b1:7b:cf:4d:7b:4f:c8:d2:0e:
db:fd:ec:f3:3a:cd:72:cd:0b:d2:1b:b4:d1:25:ab:
f6:b1:ef:5d:fe:fc:13:4a:e8:37:80:50:21:f2:07:
10:41:4f:0f:b3:74:16:d6:f1:ea:c3:4b:32:b2:8c:
91:19:59:2e:83:83:26:7d:9a:06:14:a0:3c:b4:ff:
2f:66:b6:ef:cb:b6:29:f7:c3:4e:77:0a:e3:ff:5d:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AE:C2:D1:B2:40:24:FA:7F:40:A3:51:9E:48:A8:DA:38:96:80:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/89bdd6d3-2f08-3833-852b-2137080307ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
X509v3 Authority Key Identifier:
keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.169.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:6a:0f:14:85:52:0d:69:a1:e8:7e:74:ec:37:f1:00:b0:8f:
fe:5f:4b:e7:9c:58:ab:33:c3:2b:55:d0:34:b1:b3:48:0e:a0:
81:70:61:05:0c:b1:17:a7:27:09:23:7d:98:0b:4a:5b:1d:d3:
34:4f:6d:1d:d9:8c:94:87:c0:1f:f9:b3:21:ae:d3:12:fd:50:
a6:18:db:f9:ff:63:68:a1:10:fb:78:6e:e2:63:87:34:d0:5d:
f4:1c:a9:d7:45:1e:98:e7:11:79:80:c8:70:05:7c:d6:9b:94:
0a:a4:a2:45:d2:af:bd:49:fa:e1:34:c3:e6:04:25:c3:85:a9:
ef:9e:49:e0:3a:f8:78:d9:d8:1f:a0:6d:20:33:14:2b:e4:0f:
9b:5c:4b:97:db:21:e1:ad:e7:d2:a0:2d:42:02:ff:ce:6c:12:
f0:91:15:5c:f6:e9:0b:8c:ec:f9:d2:ca:39:6f:f2:3f:38:ce:
d4:2c:78:9a:d9:3a:3b:d5:8a:0d:ec:b8:7e:b2:34:52:a9:db:
97:8c:68:51:d7:60:cd:5a:31:61:3b:d7:53:bd:ab:37:5f:0d:
66:b5:c9:6f:bd:92:d7:21:46:8c:0f:66:64:1e:eb:18:56:a4:
d1:a9:9a:c6:e7:a8:f4:59:0c:fb:63:d8:e0:00:aa:da:9a:70:
bc:1e:9f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:14 2025 by rpki-client