Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f769ee94-0ddf-3dc9-9dec-8c9fbff88583.roa
File: f769ee94-0ddf-3dc9-9dec-8c9fbff88583.roa (raw, json)
Hash identifier: 2c7HCooZnb3Wn4/ENhd+i1lqTZU8zHmIIIspCpOyAS8=
Subject key identifier: 18:3D:51:BC:10:E1:CE:81:2F:09:B4:1E:54:6F:65:8D:A7:3E:A7:9E
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848F65BDB118DBAEE013190AB20
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f769ee94-0ddf-3dc9-9dec-8c9fbff88583.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 6597
IP address blocks: 209.8.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:db:11:8d:ba:ee:01:31:90:ab:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=5ff2aac1-d285-4f08-bd69-938d4fec9bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:23:bc:56:7c:a5:e9:bd:b7:16:cc:e2:76:a4:
02:d9:04:3d:93:94:fd:5d:50:0e:47:8e:ef:00:e5:
f2:97:c2:22:54:57:b6:9b:d2:eb:8e:e9:66:03:e6:
86:17:ac:aa:85:a3:c8:e7:89:ae:97:c9:ec:41:3c:
06:2f:f3:4c:2b:fb:1a:96:b5:83:5c:cb:88:8d:70:
17:97:b1:19:69:c9:61:b5:59:1d:2f:64:67:5e:ed:
61:66:c1:42:8c:85:04:36:6f:d6:fd:cb:d4:c8:af:
00:24:a7:45:2d:99:7a:98:21:55:15:08:7c:fe:df:
4e:04:90:7d:d9:16:32:46:fa:40:03:b1:93:75:a9:
2d:de:f6:37:24:2a:c2:5c:9b:ad:ec:ca:c7:8c:5e:
e9:7f:77:8c:29:1c:4c:92:c0:6f:48:d8:d2:69:19:
3e:96:65:ba:c6:7a:ad:67:48:2f:00:8c:bc:d3:8c:
c7:ee:40:55:96:4f:46:63:fe:1a:3f:2b:e5:6e:f4:
3a:f6:93:30:25:7a:49:78:4f:fa:4b:02:18:1d:f5:
29:e6:c6:bc:60:0c:60:5c:3d:ab:ee:5e:16:86:39:
46:3d:23:84:8c:32:a1:5b:14:8c:72:60:44:50:19:
83:9d:ec:62:56:7c:cd:a7:b8:a9:1c:db:19:33:c9:
24:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3D:51:BC:10:E1:CE:81:2F:09:B4:1E:54:6F:65:8D:A7:3E:A7:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f769ee94-0ddf-3dc9-9dec-8c9fbff88583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.8.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:48:b4:93:e4:d4:5b:67:3c:98:9f:d6:38:3d:d7:63:54:23:
77:85:3d:56:50:41:29:13:98:0e:f1:9a:cf:64:09:e4:20:07:
84:31:c4:9f:ef:d7:71:29:87:3e:78:0f:30:2d:b1:a3:c2:31:
d1:32:a5:8c:7c:d2:c9:19:21:8c:77:6d:a1:1d:1f:c0:d5:14:
0b:f0:eb:bb:ce:34:82:85:8e:63:28:5a:7d:68:6c:29:c8:ba:
b3:e3:cb:f7:7f:b4:7c:c9:17:6b:8c:0a:f2:4c:52:2b:02:01:
77:e4:88:52:8c:de:e3:b8:e8:b6:e6:59:44:3d:b9:34:bb:df:
e4:7e:9c:c1:4e:08:48:df:ed:c4:63:be:66:3f:95:b1:35:47:
38:0e:05:b1:49:40:af:79:98:81:31:db:69:cb:74:06:ae:98:
de:97:7c:79:46:67:13:a6:34:6c:61:c2:fe:d5:af:75:7a:f1:
a4:0d:2e:8a:ce:a7:84:82:74:27:2a:9c:75:c5:72:a1:03:04:
5a:85:6e:59:01:b3:eb:76:2a:e0:3b:be:a6:39:e2:25:b0:8a:
2b:b5:03:3c:8f:a9:ee:ad:a8:5b:57:2c:78:f7:ed:e1:57:43:
74:a1:ee:ef:88:ee:b4:57:1e:b7:f5:df:90:ab:dd:b1:20:fa:
7b:5a:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:30:52 2025 by rpki-client