Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/e003e785-578c-3896-b3bd-1dd5d9cadc3f.roa
File: e003e785-578c-3896-b3bd-1dd5d9cadc3f.roa (raw, json)
Hash identifier: dKJZegn704XVizl+EIsV8ompD+MwhDV3qNqRYG7xKTM=
Subject key identifier: 5A:FE:7D:2A:C8:5B:D0:94:04:C3:29:4D:DD:4B:F8:8E:30:C3:47:23
Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial: 010D0C9F43285848C3ADC59D3143F97AAD1010A0
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/e003e785-578c-3896-b3bd-1dd5d9cadc3f.roa
Signing time: Mon 03 Feb 2025 22:19:39 +0000
ROA not before: Mon 03 Feb 2025 22:19:39 +0000
ROA not after: Sun 04 May 2025 21:19:39 +0000
asID: 14618
IP address blocks: 209.169.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c3:ad:c5:9d:31:43:f9:7a:ad:10:10:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Validity
Not Before: Feb 3 22:19:39 2025 GMT
Not After : May 4 21:19:39 2025 GMT
Subject: CN=398cceb5-3448-4830-9c6e-c56ecb5a64e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:76:17:31:72:b5:61:9b:17:32:44:19:5d:
d3:6c:99:b2:0a:ee:8c:da:22:44:57:16:4a:18:f0:
9f:ca:63:ab:ec:fa:17:a7:42:3c:91:7c:e3:af:1b:
74:ab:43:71:94:e7:49:cd:46:b1:e2:6e:15:d5:cd:
b3:18:24:88:17:d5:67:41:47:3f:76:f7:20:fc:a7:
39:20:c3:7a:bc:40:ba:d0:80:1d:e9:22:ce:c6:32:
bf:36:8f:e4:1a:fc:b6:63:b2:35:82:d4:3e:dc:30:
06:4c:bf:61:a3:cf:cc:35:9e:d5:6b:09:f4:15:52:
32:10:dc:28:de:ec:df:bc:85:2c:1d:b3:e8:b2:c0:
4c:d6:9a:76:9f:45:83:eb:42:3d:fd:b4:37:9b:06:
1c:ac:97:bf:45:0a:5d:49:be:1a:a9:92:8b:26:22:
10:2a:a7:2a:d8:c9:df:6e:07:02:1f:2d:64:a6:e0:
12:fd:22:01:38:f4:c0:0f:01:4e:b0:fe:09:71:ab:
f7:a8:bf:0e:35:ed:03:98:48:21:53:1d:fb:be:b5:
56:a6:ee:c1:28:e5:d3:18:6a:4f:a0:fe:94:76:9f:
e1:62:1d:83:58:9c:76:63:ee:93:76:78:87:3a:de:
d9:ab:e8:b7:56:3f:22:47:18:0e:09:8b:dd:3f:a6:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FE:7D:2A:C8:5B:D0:94:04:C3:29:4D:DD:4B:F8:8E:30:C3:47:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/e003e785-578c-3896-b3bd-1dd5d9cadc3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
X509v3 Authority Key Identifier:
keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.169.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:7a:8e:ec:d4:df:1c:ab:b6:73:a2:74:eb:e6:30:10:9a:8e:
36:ce:93:85:8b:89:35:52:70:f3:44:03:31:56:b1:6a:ab:f4:
c2:39:2a:a2:01:10:f3:69:64:48:80:dc:c2:cb:c2:1e:a4:18:
36:10:8a:aa:78:93:23:71:99:74:77:31:66:03:a5:2c:64:e0:
9b:e1:52:c3:e9:74:67:cf:ba:e9:49:52:71:55:08:57:9d:7b:
1c:fe:ab:71:78:cd:3f:af:30:e4:4c:d5:6a:72:25:97:ee:20:
b2:ad:90:d0:2d:69:94:04:c6:6f:f2:bc:f4:23:06:f3:41:10:
6d:4a:47:89:68:8d:4e:2f:75:6b:f2:1f:fc:25:15:79:99:60:
79:aa:9e:b5:62:af:7a:1d:cc:c3:a6:28:10:75:52:48:ed:1d:
43:0a:a8:77:c3:64:7f:c6:1c:7e:85:fe:39:51:85:f1:d8:e7:
e5:0e:43:d7:d3:3f:f7:1f:5c:63:2f:d1:52:d8:1e:93:54:41:
d7:b3:b0:0a:83:57:0f:85:96:39:a4:3e:2a:0a:a4:11:60:9a:
8f:09:48:0a:3d:52:a9:2b:44:c1:35:aa:c3:6b:b9:be:48:87:
7d:17:a1:ae:d5:fa:3d:6a:42:45:0e:d5:94:80:d0:25:b7:27:
65:b3:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:18 2025 by rpki-client