Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78b046ad-708c-347f-a46d-fd7dd43f4f00.roa
File: 78b046ad-708c-347f-a46d-fd7dd43f4f00.roa (raw, json)
Hash identifier: w9mb3mT8PELRydwQOaea6RrM80eg16GfTT33/UE8Y7s=
Subject key identifier: 82:0E:A7:8E:5A:B6:66:75:43:75:08:18:0B:EA:25:2C:F4:63:BF:8A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A996336854312C3DC0F55D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78b046ad-708c-347f-a46d-fd7dd43f4f00.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 32787
IP address blocks: 209.200.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:33:68:54:31:2c:3d:c0:f5:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=2bf80fb5-a17b-4381-808f-a4bd4428ba18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:da:65:eb:b6:48:89:3b:03:fb:12:c4:81:
7c:89:f5:fb:5f:7e:42:0a:d8:b0:1b:03:e6:97:66:
29:89:b3:d6:b7:87:c4:54:65:54:e0:e3:52:bc:28:
57:5b:02:1c:31:d9:e2:f7:ae:11:80:0b:1c:5f:1f:
e0:98:86:70:6d:20:db:9e:63:6f:d2:ac:e6:02:57:
2d:19:2d:32:af:ec:e1:d7:25:b5:d5:bd:ed:18:ac:
e3:83:1b:8b:0a:f1:ab:a9:81:18:f3:c4:3a:79:6f:
ce:93:b0:ed:10:cb:04:ae:fa:3a:80:dc:18:20:ea:
82:8b:0a:f2:0c:4c:2c:cc:d6:6a:0b:5b:4f:33:68:
e6:3f:54:9a:50:e6:da:fa:d0:05:35:b2:a4:67:31:
43:3a:ef:05:1c:56:60:19:45:b2:e0:fc:de:0e:42:
0f:a3:c4:36:3e:1e:54:03:36:ac:10:fe:3a:71:c2:
6c:8f:68:07:6a:d9:b5:d5:8f:18:9a:04:19:87:56:
ba:28:0f:00:57:1a:89:cd:13:3a:11:0f:ef:96:0e:
90:57:49:09:58:4b:ff:8c:31:1e:be:52:57:69:6a:
7e:93:8c:76:63:fb:be:8c:67:e0:f1:7a:5e:53:a2:
e9:c4:31:59:c7:4b:9f:c5:18:59:ab:e3:04:dc:db:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0E:A7:8E:5A:B6:66:75:43:75:08:18:0B:EA:25:2C:F4:63:BF:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78b046ad-708c-347f-a46d-fd7dd43f4f00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
209.200.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:0e:7c:22:cb:9b:e4:43:79:39:36:34:dc:26:83:d9:e8:4c:
c0:d1:43:eb:ff:d5:21:27:20:9a:89:91:1b:6a:92:35:58:4d:
08:6f:3b:38:be:40:38:cf:0f:40:db:33:8c:4e:73:70:6c:86:
a3:7a:be:1c:21:0f:c3:0b:0b:d7:19:2a:6a:8a:fc:90:ac:1e:
1d:2c:dc:f7:e2:7e:9f:ac:42:e0:0b:51:be:bf:5d:4e:a5:80:
14:42:f2:ea:54:9c:94:0f:2d:d3:5b:cf:03:a1:4c:f6:1a:c3:
cd:bd:fd:b9:e9:a3:30:e2:c4:a8:28:02:52:42:50:2a:a9:fb:
c3:26:82:75:54:12:1d:f9:00:e8:9c:1c:99:fa:80:07:19:3c:
f9:99:63:ad:73:21:0a:27:09:6a:b6:45:5e:12:c7:62:16:6f:
26:c3:9b:76:32:cd:8d:79:25:b5:45:43:c2:2e:ca:de:7e:c8:
d2:54:26:1b:cd:11:ec:fe:e7:e1:eb:c9:00:36:40:47:79:7d:
79:59:2e:76:4c:0f:92:94:ed:ee:59:6d:11:b1:9c:e9:e8:e1:
fe:df:7c:90:58:53:8b:fa:a0:81:6e:f9:33:de:01:a1:c7:74:
b8:a9:bd:7d:09:0d:9a:f3:63:68:36:b8:b0:8a:9c:2d:ff:03:
bd:49:9f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:45 2025 by rpki-client