Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/efe9fd20-4d24-3686-aa49-f25771fa77fb.roa
File: efe9fd20-4d24-3686-aa49-f25771fa77fb.roa (raw, json)
Hash identifier: z/EtUuvRLQabWQKCWDNTL1yIS5mi6kWNP1Yhy2GSTn0=
Subject key identifier: 9E:B9:63:4C:9B:AF:25:F4:1B:22:C1:85:4C:0D:73:62:53:00:79:77
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848A1360759C8C916FD166B2B80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/efe9fd20-4d24-3686-aa49-f25771fa77fb.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 7262
IP address blocks: 209.9.216.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:07:59:c8:c9:16:fd:16:6b:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=6f80ecaa-6c85-4206-9a65-624dddc8afe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:68:f3:5d:3d:5e:ea:6f:11:f4:cb:f5:2d:
67:5b:b4:a8:fd:15:b0:20:28:a7:bc:3e:06:4e:78:
63:43:d9:a8:f9:bd:bb:a6:32:7a:2b:82:69:f2:21:
66:c3:e1:ed:e7:df:5d:9c:36:39:25:23:56:8e:ba:
a5:d9:03:02:44:ed:33:44:82:e1:6f:35:05:c1:62:
14:c3:37:bf:76:a1:d4:ea:2d:99:15:83:17:62:ad:
38:33:ef:47:7c:70:d0:1e:ec:28:d4:f1:38:80:f1:
70:96:eb:22:2c:63:d2:08:ee:ff:ce:38:66:3d:be:
67:98:4f:1d:79:45:b1:84:ba:42:fc:f7:ae:7c:bf:
44:47:ba:d1:3c:46:51:7f:7c:e4:4c:25:17:cc:e8:
61:2a:f6:04:23:f8:bd:23:a3:0d:84:c2:f9:ff:6b:
d1:46:4a:d5:6b:15:6a:97:53:41:47:0c:7d:6b:60:
1a:40:03:57:fd:fc:4f:5f:3d:c1:44:0e:11:54:ab:
0e:8f:a9:f1:b9:f6:14:7e:21:e3:33:a9:1a:38:bc:
0c:76:27:69:56:8b:5b:fb:05:2e:d7:e2:b5:5d:a8:
ef:c0:86:32:11:b4:41:d8:56:1a:86:d1:47:dd:d8:
f6:24:2a:85:82:e0:6f:97:e2:16:8a:07:e2:87:d2:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B9:63:4C:9B:AF:25:F4:1B:22:C1:85:4C:0D:73:62:53:00:79:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/efe9fd20-4d24-3686-aa49-f25771fa77fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:19:19:6a:62:2e:c8:93:1a:2c:b6:c6:2b:2d:5f:30:61:3a:
9a:18:48:24:34:54:af:7a:2a:d3:3d:83:65:04:5b:22:7b:3c:
17:6d:97:73:c2:1c:0e:b0:cf:a6:a6:d6:f2:49:b8:c2:85:0d:
41:34:df:af:3b:d4:64:0c:45:b8:ac:2b:51:0c:db:63:7a:e1:
69:f7:7c:72:34:3c:45:04:10:9c:47:94:20:fd:ee:b0:8a:90:
5b:35:79:78:52:02:a4:52:c3:af:2c:f4:75:0a:69:b3:ce:6b:
65:da:f7:ba:6f:09:ef:84:b3:d7:08:3d:d0:ff:e6:8d:3a:37:
11:11:7d:c1:bc:7f:1b:9b:b5:9f:dd:06:72:5a:e9:d5:66:fa:
a6:13:43:6e:11:06:f6:f8:eb:1f:7b:c3:46:d5:79:a6:c2:bc:
69:48:80:65:5c:1e:6a:c6:16:78:b4:e2:e5:48:cd:4a:35:e4:
63:d1:67:e8:9b:40:1f:4b:e6:0a:55:79:b9:27:de:4b:30:6a:
0c:85:b4:4e:75:80:bb:b0:52:e6:a6:72:a8:57:d8:5f:8c:bd:
ef:ec:a2:5c:c0:96:6d:f7:05:df:31:69:5d:ab:20:c4:e9:cd:
32:32:e4:72:dc:c6:6d:da:0c:8c:e2:bb:10:ec:c8:a6:37:da:
49:b2:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:18:05 2025 by rpki-client