Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d18cb1c-40fb-3534-be26-16ad4a5452fe.roa
File: 9d18cb1c-40fb-3534-be26-16ad4a5452fe.roa (raw, json)
Hash identifier: Ep6WASaF179l6i40JxrNL8EF+W3eeiEN0aFnK9AraTc=
Subject key identifier: 2F:E0:12:13:0B:64:EA:F0:45:BA:22:B3:9F:24:9C:89:AA:33:FA:D9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584953B661F7B754A46690A636C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d18cb1c-40fb-3534-be26-16ad4a5452fe.roa
Signing time: Thu 27 Mar 2025 12:33:24 +0000
ROA not before: Thu 27 Mar 2025 12:33:24 +0000
ROA not after: Wed 25 Jun 2025 12:33:24 +0000
asID: 32787
IP address blocks: 209.200.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:b6:61:f7:b7:54:a4:66:90:a6:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 27 12:33:24 2025 GMT
Not After : Jun 25 12:33:24 2025 GMT
Subject: CN=189ab777-3830-4530-b0c3-425ea18096a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e4:e8:0d:e3:a6:e1:03:40:b3:cd:dd:c3:70:
5c:82:d4:e1:1f:74:48:0c:bf:39:ef:93:05:06:6b:
6a:62:0b:7b:22:65:98:c3:5b:55:d3:d1:a1:4d:a5:
a2:a8:e0:da:15:ce:1d:6d:e5:4e:df:a1:bb:01:4b:
62:f9:b8:d1:33:7f:26:68:4a:0f:02:c2:f3:52:7f:
de:89:9d:b2:41:08:97:ae:c8:f1:60:fc:4d:8f:cf:
19:fd:48:ba:10:58:f8:7b:2e:78:29:60:53:38:15:
f8:77:1a:e6:4b:a2:e2:1e:7f:58:b0:a0:0f:9b:c0:
2b:f6:4d:c4:da:6d:1d:db:67:dc:ca:dd:dd:76:e2:
92:86:d5:62:c9:00:0b:86:aa:5f:60:b6:5e:8c:a3:
e8:11:d5:44:61:ac:6b:95:27:5c:c9:ce:c0:6f:fd:
df:e1:83:06:0c:c0:30:95:d4:42:c9:47:b4:18:3a:
bc:79:bd:2d:b8:0c:fb:dc:82:61:d3:75:7f:e6:9c:
c4:cf:5e:51:01:3b:92:98:eb:f4:5b:1f:c6:cc:3b:
d8:63:99:b6:36:3a:02:fc:97:05:da:7e:ad:1d:19:
f5:90:20:17:9e:51:0b:20:26:6f:e2:90:d4:74:6a:
f2:f3:91:e4:b4:08:86:01:19:bb:cc:84:7b:5e:88:
70:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E0:12:13:0B:64:EA:F0:45:BA:22:B3:9F:24:9C:89:AA:33:FA:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d18cb1c-40fb-3534-be26-16ad4a5452fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
209.200.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:dd:76:66:88:11:04:00:f9:0d:f8:ee:49:c3:6d:7e:bf:f2:
76:e2:90:0f:ff:c5:6e:f6:71:e8:fd:f3:ca:bc:20:7f:e0:98:
10:4c:8f:92:32:0c:7a:b5:2e:66:5d:0f:98:e8:3d:86:c9:b0:
86:c5:50:52:df:ae:99:ff:fe:d8:99:76:ca:60:24:ba:05:72:
18:9f:ef:15:36:ff:e3:20:53:9d:ad:6b:86:45:1e:6e:af:16:
ff:97:7f:d3:e2:9c:9a:a3:3f:9f:bf:75:b8:0f:46:9d:ab:00:
23:20:97:07:84:4d:e9:f9:6f:45:20:f1:a0:17:d5:1c:a4:12:
1c:a3:d7:90:c4:54:4c:a7:e7:51:fb:4f:eb:6a:c5:92:ef:21:
9f:1b:09:b4:a8:bb:db:2e:43:7a:fd:06:b4:44:55:af:f9:1b:
cb:a6:d3:38:35:d7:0a:0e:ba:8d:92:7f:08:ea:9d:cc:08:db:
d4:b5:a2:a6:2e:16:6f:27:09:68:cb:0d:ae:d2:f1:ae:76:3d:
7a:ac:46:f7:7c:fb:50:02:09:2e:f1:af:c1:e3:5f:5e:e5:5f:
48:e9:70:fb:b2:f3:fb:fc:53:f7:22:25:cd:18:1b:c7:42:9e:
93:9c:2e:60:63:b9:dd:fb:61:3f:f0:11:a2:2f:64:06:b1:0d:
3f:9f:44:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:55 2025 by rpki-client