Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17d88fe-6db1-3169-a42b-613612114fd6.roa
File: d17d88fe-6db1-3169-a42b-613612114fd6.roa (raw, json)
Hash identifier: 5RWS4tQvP1sV8fc6H8YHHONjRxDz3OxgeSDjNHuJZEM=
Subject key identifier: 09:8F:79:EB:C7:BB:4E:BB:8E:A0:F7:5A:8D:61:66:68:2E:4D:AC:2E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584953B6631B66E5F58A74E30300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17d88fe-6db1-3169-a42b-613612114fd6.roa
Signing time: Thu 27 Mar 2025 12:33:24 +0000
ROA not before: Thu 27 Mar 2025 12:33:24 +0000
ROA not after: Wed 25 Jun 2025 12:33:24 +0000
asID: 32787
IP address blocks: 209.200.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:b6:63:1b:66:e5:f5:8a:74:e3:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 27 12:33:24 2025 GMT
Not After : Jun 25 12:33:24 2025 GMT
Subject: CN=feb95eae-d916-4106-91b7-1a0a28ab5fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:80:1c:37:73:11:5e:7e:81:38:bd:a5:fd:
9e:18:b5:80:d6:68:58:a6:53:f4:a9:1b:19:df:b8:
73:da:43:7f:6b:b0:76:67:ab:96:0d:03:93:61:f8:
1a:9e:8a:65:6e:de:d4:e7:b9:52:85:0c:68:d3:96:
06:13:89:2b:ba:0a:e9:2c:79:4c:ce:5d:63:8e:0e:
5e:8f:08:e6:c9:83:d9:72:4a:1e:0a:6e:79:1a:24:
9d:89:8f:22:14:50:57:86:b5:3b:cc:f8:9a:88:96:
18:83:b4:2c:f2:8b:2a:eb:0e:7f:cf:5e:36:93:c2:
9d:90:b3:d2:4a:89:d3:e8:06:9b:48:bf:f1:97:76:
26:67:6f:fb:9c:b0:c0:6a:6e:89:b2:3d:fd:bf:d9:
13:32:9e:0f:b3:36:e0:c9:ff:5b:d6:27:92:20:84:
94:41:46:7e:8e:48:7f:1a:5d:e6:0f:45:33:06:f1:
c8:e1:23:3f:ad:2a:1c:bd:5e:9f:cb:bf:03:2c:c5:
e9:78:46:d6:4a:cd:2c:b6:5d:07:a8:79:1a:99:3e:
46:6a:e6:c3:d3:66:7e:d4:20:3b:e5:28:94:a7:3f:
a7:32:61:a5:f5:04:46:91:af:d0:ad:62:5e:fb:b2:
97:8c:ae:3e:af:6a:92:cf:96:94:2e:b2:b7:ef:a7:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8F:79:EB:C7:BB:4E:BB:8E:A0:F7:5A:8D:61:66:68:2E:4D:AC:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17d88fe-6db1-3169-a42b-613612114fd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
209.200.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:c5:bf:15:c1:f1:1e:8b:d7:d8:da:93:25:ab:5e:83:25:20:
81:be:28:09:2b:9a:b5:17:d8:09:56:5b:75:ae:01:2d:ec:cf:
8a:b0:f2:49:ad:ab:42:21:3d:43:9f:10:f2:cc:76:bf:88:35:
c9:a3:85:c6:77:93:3b:e0:bb:5d:c7:1b:94:fb:c9:02:0d:9a:
0e:54:58:8b:8b:88:5d:dc:50:ff:1e:f5:3a:06:cf:bb:03:0c:
52:e8:10:99:c4:e5:4c:83:5f:7f:79:77:80:0c:1f:b6:d9:b6:
77:97:89:cc:0e:39:70:88:58:0e:31:89:dd:92:e2:53:88:9f:
5d:ca:86:c1:03:5d:ba:fb:cc:4d:26:fb:31:e5:22:3e:78:fd:
77:50:04:76:59:67:aa:ac:46:9b:8b:ad:c6:b6:58:14:d2:ce:
f1:38:4e:4d:8a:16:64:52:37:40:f5:0d:fd:10:eb:da:7f:cd:
a8:4e:cb:8b:0a:c0:ba:f4:e2:ef:f5:65:84:05:2b:3b:82:51:
71:da:fd:6a:c1:c1:8b:68:b5:81:fb:8e:f8:72:ff:47:9f:ab:
cb:29:cc:e4:3f:2f:a0:70:7b:eb:d2:8d:98:f2:6f:08:e3:8b:
5e:7e:14:18:76:63:e7:08:0d:83:25:df:31:4a:f9:e1:29:cb:
48:4d:04:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:57 2025 by rpki-client