Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5d04eb3d-82fd-3250-9bf3-54aa2b719b46.roa
File: 5d04eb3d-82fd-3250-9bf3-54aa2b719b46.roa (raw, json)
Hash identifier: /3YCYBIEZON/k+I297zlXtuPeEgCJhqZ3PLwi6fAj7w=
Subject key identifier: 8D:51:27:78:EB:CD:52:0C:CE:32:4C:76:86:1C:E4:7C:96:01:2E:CD
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848FD56B4734808A4780BBEAF80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5d04eb3d-82fd-3250-9bf3-54aa2b719b46.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 31713
IP address blocks: 209.9.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:b4:73:48:08:a4:78:0b:be:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=1cdc6da7-922f-4f40-8b9c-4571ce431c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:dd:fd:8b:52:be:51:4a:b5:f4:0e:12:d4:
6c:16:87:11:95:8f:bc:49:22:2c:65:55:48:db:49:
86:ff:d0:e0:ee:69:df:20:9a:ea:a8:1c:6f:35:74:
ff:ff:12:b8:14:61:c2:28:de:1f:a7:4f:92:e0:e2:
d0:ff:5c:c8:c5:f2:b4:0d:98:8b:0d:a7:7c:4c:67:
98:70:55:55:b6:32:40:a2:d7:4d:85:a0:c7:f5:2f:
8f:47:b3:14:70:8e:0d:ca:eb:f4:13:9b:7a:e4:91:
5c:75:36:6d:fa:de:4f:95:b4:0f:2e:5d:e6:b2:51:
46:0c:78:ab:12:8c:3b:e0:42:9a:db:1f:d4:d5:18:
27:3e:6b:5f:f3:6b:b4:ba:d6:8f:19:74:e7:9a:ae:
39:49:06:b0:49:2f:8d:d5:53:02:45:d0:c7:24:f1:
5e:20:98:26:22:e3:5c:b9:f4:73:a5:e2:07:92:52:
31:7f:90:72:2d:a3:33:2e:15:ed:1c:c5:29:7a:7d:
78:1f:76:86:2f:cd:72:d5:d7:c1:f6:00:f1:dc:f4:
01:42:c8:34:02:00:59:eb:24:ed:20:46:87:43:8d:
66:ba:31:5b:7a:a1:f2:03:fb:52:a8:05:c6:39:a1:
35:68:1b:86:d8:95:b5:d3:a1:91:58:9e:34:31:1b:
bc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:51:27:78:EB:CD:52:0C:CE:32:4C:76:86:1C:E4:7C:96:01:2E:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5d04eb3d-82fd-3250-9bf3-54aa2b719b46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:82:e4:ce:9a:00:80:cd:54:0b:fa:a5:a9:47:34:cd:78:6b:
17:ea:c9:4a:98:34:87:ca:67:b8:c5:cf:87:4d:89:bb:76:d1:
48:34:f7:b0:5f:f0:1e:9b:eb:32:0a:cd:75:4e:2e:56:73:3f:
cd:cb:52:5c:e5:32:3f:3c:09:1a:2f:88:d3:70:3d:c8:0b:e0:
25:de:57:a9:9c:2f:f7:f4:c8:1b:b1:75:ed:f8:0b:db:9b:d8:
33:35:48:ab:00:72:64:d2:93:80:9a:b2:b2:68:25:73:8c:a8:
20:a9:b6:f5:f6:3a:d5:b3:e4:a4:54:fc:69:15:66:67:1f:3e:
c5:9b:bd:ed:61:9d:0a:45:24:b3:f9:19:f9:7b:99:b0:52:22:
85:f2:04:25:e1:8a:91:ce:b7:f9:9d:12:5e:68:f3:52:93:17:
34:7c:b1:22:ec:c0:d9:c0:bd:67:3e:9a:31:ca:05:51:94:de:
03:57:48:fb:06:87:08:40:fb:0d:6f:ad:87:f7:e6:e8:8e:5b:
7e:bb:6a:ed:4a:6d:43:0b:45:77:37:08:27:43:4f:fc:d3:8f:
a9:96:c5:26:ac:24:0c:67:3d:11:0d:1b:cb:4d:d7:7c:3a:e5:
d8:4e:a2:e7:31:52:a0:6e:8c:ba:15:77:d8:25:ef:2a:49:d6:
4d:38:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:42 2025 by rpki-client