Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa
File: 49212b0f-98c1-33f7-b49b-5bbad34aa488.roa (raw, json)
Hash identifier: QUhWzRoMDtyaSrPAZEe5hAoqnbOd/eKQX9NbgHBOrBo=
Subject key identifier: BC:A5:B9:7C:DB:2A:75:4A:0F:19:50:AE:BC:06:AB:05:76:95:6C:59
Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial: 010D0C9F432858494733DFDBA267448D6D3FFB98
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 14877
IP address blocks: 209.50.137.0/24 maxlen: 32
209.50.138.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:df:db:a2:67:44:8d:6d:3f:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=161ebff7-c35c-49a3-9859-7d625e78a13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:79:f0:1c:54:d5:d7:43:9e:92:f5:f7:a3:
b3:3c:0a:d3:5e:e5:f7:22:bc:d9:70:cd:4c:e7:ca:
33:08:fd:03:30:f2:18:1a:23:1e:b5:08:0a:f1:26:
c6:9f:69:ab:d9:a5:4e:16:f0:81:b1:6f:ef:cc:0e:
b2:7b:25:3a:10:c6:57:3f:f4:1e:7f:34:1c:d0:34:
a6:be:a1:15:50:b5:6a:e3:92:6e:51:3e:42:dd:37:
74:09:1a:4e:6c:76:9d:a6:07:43:d6:3a:89:6d:d4:
71:16:28:05:ee:5a:62:24:21:d4:9b:af:24:e7:72:
f7:ce:06:4f:09:74:95:fb:33:1f:b4:b3:62:dc:09:
82:e0:ee:1d:8b:f6:88:4a:af:0d:ef:4f:40:40:ab:
c4:b1:6e:44:1a:20:88:64:3e:f5:19:9e:dd:d5:2d:
43:72:8d:3b:9d:ba:97:39:a2:77:b2:5c:29:a8:b1:
b5:9d:19:9f:4b:c0:92:e7:2e:8e:1a:1e:d6:3c:81:
cb:70:79:05:a8:04:39:a7:6a:31:47:f6:89:99:a4:
ba:90:ee:1b:3a:26:98:87:56:21:62:88:da:da:ba:
f5:19:f4:a5:f1:56:46:e9:68:ea:b7:19:b9:2a:c0:
ce:83:79:b1:fe:03:fa:f1:cf:14:b6:db:bd:02:c7:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A5:B9:7C:DB:2A:75:4A:0F:19:50:AE:BC:06:AB:05:76:95:6C:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
X509v3 Authority Key Identifier:
keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
sbgp-ipAddrBlock: critical
IPv4:
209.50.137.0-209.50.138.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:f3:d2:37:d7:79:bc:57:5d:c5:bd:d6:88:ba:38:d5:47:c8:
42:b9:86:09:08:aa:22:90:75:61:a3:a9:54:de:44:79:e1:10:
8b:0b:aa:68:07:4e:c7:e0:72:33:33:da:f8:57:98:1f:3e:eb:
52:49:83:26:a6:26:e8:8f:cf:c0:17:c9:65:a0:95:e4:6a:5d:
64:ee:1d:cd:61:6e:aa:6c:fd:5f:3e:76:39:f5:cf:f0:b1:f9:
72:bb:72:13:d4:2d:ef:8f:77:71:a7:4f:0e:31:70:20:cd:ce:
b5:51:bc:d4:ed:f9:33:04:da:a3:da:4c:73:28:69:c1:39:57:
cb:b3:59:d0:c7:63:3b:14:c6:84:bd:d1:d8:b8:d8:84:e1:ef:
6c:ef:60:63:a8:e9:74:e7:ad:b7:60:df:e2:b9:64:30:5d:5c:
d0:13:f4:78:07:e6:9b:79:58:00:45:02:34:8e:cd:d6:fe:af:
c9:68:d4:7f:88:b7:24:c4:2d:5d:8e:bb:e4:b1:b8:7b:d9:ee:
57:af:8f:84:67:d4:0d:22:ca:2b:e5:aa:24:5a:64:01:5b:62:
92:60:2e:8a:38:d9:75:54:de:e4:7b:ee:4b:b9:df:4a:d7:60:
78:a0:2e:af:74:45:7b:b2:ba:1d:1a:99:f4:74:ad:55:1b:0e:
6b:88:2b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:34 2025 by rpki-client