Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa
File: a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa (raw, json)
Hash identifier: KC6La2GAuHEB0XnOS8/eB5d6cMKSKxMcsY/bB0cqjxA=
Subject key identifier: 6B:00:BF:1C:7D:CE:05:74:D2:DB:04:31:ED:56:FD:DA:98:40:2B:FD
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848FD56B6446A4A55169B1FD380
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 31713
IP address blocks: 209.9.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:b6:44:6a:4a:55:16:9b:1f:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=eaef7e85-bed4-45df-bcfa-914a7da53613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:77:42:0b:91:29:d2:f9:65:3c:52:7f:7f:44:
bb:f2:b5:aa:18:0f:7d:86:55:f2:ab:86:3f:0c:10:
7c:2c:41:9a:09:35:61:41:e6:f4:e6:6f:07:51:0e:
8e:bb:56:20:13:2a:2e:d4:8b:81:88:fa:a3:41:d0:
b3:0d:fc:96:88:25:4b:1c:91:89:be:6d:d0:89:f3:
d3:33:ff:bf:4c:31:15:21:42:bb:5d:a2:2b:28:eb:
3e:a8:12:1a:64:5f:24:01:3d:38:84:39:32:46:d8:
e9:a9:98:42:f5:da:00:5e:43:07:27:34:68:93:49:
de:e4:49:17:bb:00:fc:23:a2:fb:42:46:5f:e7:8d:
5b:8a:cd:fb:8e:0c:88:66:87:84:0d:1e:bc:c0:f5:
1b:c3:e9:c8:0f:72:99:e9:a9:9c:79:88:f2:d7:b1:
f1:4f:29:f5:88:3d:c3:e3:2c:a7:9a:6e:5e:5d:04:
88:c2:89:55:16:e1:bd:33:8d:ed:b6:00:b4:49:55:
75:b3:9e:73:59:ae:83:b0:1b:43:fe:ef:b4:45:7c:
00:84:e2:ba:2d:25:40:5a:cd:0a:02:7b:8e:d2:ad:
e1:52:60:d4:52:65:9b:7a:bd:14:95:99:d2:19:27:
45:ad:c0:2c:5a:8a:8a:b8:fa:62:a9:c1:ab:de:4b:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:00:BF:1C:7D:CE:05:74:D2:DB:04:31:ED:56:FD:DA:98:40:2B:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a6ee2e1c-26d1-3a09-9706-396a7b477d5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:25:4d:be:39:2c:ac:e6:ed:36:89:62:90:b7:36:a9:30:cc:
e9:c3:73:7f:f5:63:0b:3d:32:e0:f0:26:37:cc:d2:f4:d1:f8:
1e:c0:da:93:62:6e:ea:a1:47:d1:6c:92:c9:58:53:25:de:e6:
2e:85:2d:fe:65:a3:ca:5d:8c:be:cc:82:2b:70:d1:a5:97:25:
9f:b8:7c:66:c1:b1:4c:45:30:41:62:c5:78:61:26:99:e4:51:
45:29:f1:8e:05:e3:e7:dc:b2:32:b4:e4:40:58:71:d0:b7:68:
85:7d:a4:ab:8a:0c:e1:55:89:30:3c:2a:89:4a:c0:80:1f:b3:
47:97:af:d3:e6:fb:10:d0:01:25:46:3c:d4:79:8d:d9:4b:df:
8a:22:67:95:1e:ea:b4:92:bb:ea:63:e5:18:41:33:21:30:59:
62:1a:a9:43:4a:0b:36:95:29:6d:9c:63:fa:fd:b2:b9:d0:c5:
e4:d6:26:8a:0c:85:c7:d5:0b:a8:30:76:6f:0f:b5:3a:db:59:
ff:da:9a:43:de:02:03:b2:7b:f0:3f:8d:63:75:0e:6e:79:df:
a5:3d:8e:04:be:ef:a4:b9:0e:5a:ac:78:86:e3:fb:a0:a5:d0:
44:e7:9d:ab:31:98:d6:1b:0b:b2:4a:a7:c2:0f:75:90:00:73:
6f:3f:76:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:14:43 2025 by rpki-client