Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec789c94-aaf3-3bcc-99c2-b089684f59ff.roa
File: ec789c94-aaf3-3bcc-99c2-b089684f59ff.roa (raw, json)
Hash identifier: lBBsH0BLIZmtFgUhfMpbGxttB+SXD8/AFjjRKM9y68Y=
Subject key identifier: 38:C3:63:F4:D8:AC:2C:44:51:A3:05:CF:19:99:D5:3B:C3:68:91:25
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584953B667F4CE9D246767CF7280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec789c94-aaf3-3bcc-99c2-b089684f59ff.roa
Signing time: Thu 27 Mar 2025 12:33:27 +0000
ROA not before: Thu 27 Mar 2025 12:33:27 +0000
ROA not after: Wed 25 Jun 2025 12:33:27 +0000
asID: 32787
IP address blocks: 209.200.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:b6:67:f4:ce:9d:24:67:67:cf:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 27 12:33:27 2025 GMT
Not After : Jun 25 12:33:27 2025 GMT
Subject: CN=e9f4c2cc-34c4-4439-b454-9d864ac03aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:e8:ba:3a:b8:9a:93:30:b3:4d:3d:12:73:
76:56:57:54:1f:81:a8:fa:bb:ec:81:dd:00:1e:9f:
5e:8c:b3:3b:45:0d:be:cb:f0:d4:10:5e:dd:1e:f2:
c9:fe:07:e1:16:d5:a1:35:0d:22:6e:49:d8:b1:86:
22:89:b4:ba:66:50:88:3e:d0:4c:8d:79:8a:68:4c:
26:ae:a9:e2:22:0c:bb:3c:00:d3:47:94:c5:a3:df:
c9:cd:bc:58:a3:a6:03:59:f2:3a:40:6a:52:d9:2b:
e4:b3:15:96:37:9c:49:f6:b4:45:08:8b:42:a2:fb:
9f:1a:5c:d2:12:ad:d8:22:92:e4:6a:58:c1:86:c4:
42:3a:fb:05:80:de:3f:58:c3:ea:ae:32:03:b9:3f:
68:b1:f4:5d:25:ad:74:d0:03:18:70:d8:6a:37:f2:
9a:2b:78:25:63:17:ca:e3:0b:fd:51:5d:af:db:4b:
64:f2:78:52:a3:55:56:9c:0b:bb:9d:8a:38:36:c3:
9d:55:f0:2a:e0:f1:5a:2a:7c:4e:e7:73:c2:5c:1b:
bb:6d:c4:bf:4c:6a:01:cc:4d:00:93:62:54:46:17:
3c:81:d7:1f:35:a1:89:df:2d:5e:df:74:85:31:4c:
c6:4f:01:95:a7:5b:ce:99:be:ed:31:a2:00:75:23:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C3:63:F4:D8:AC:2C:44:51:A3:05:CF:19:99:D5:3B:C3:68:91:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec789c94-aaf3-3bcc-99c2-b089684f59ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
209.200.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:6f:8b:e3:9e:e1:24:f2:08:7d:27:0a:37:c6:c0:75:eb:e1:
be:52:98:ac:71:3e:d4:71:c5:af:d1:59:91:0f:e0:fd:2d:c6:
79:cd:1a:88:f2:3d:33:c8:46:d5:a9:86:9a:2e:9a:8e:a4:a9:
00:10:75:6f:96:b3:0a:9e:92:f3:05:72:af:55:bb:b6:69:d2:
e2:24:74:a6:07:b0:c1:e3:99:0a:cf:5c:03:4e:ed:d9:e3:ef:
74:9b:64:2a:75:61:2a:d5:43:18:db:2c:15:2e:98:4e:66:98:
6c:0f:b8:22:c9:4e:55:db:5f:9d:74:46:a6:94:58:7f:12:34:
86:c0:11:fc:68:7e:1f:30:63:07:99:c2:74:12:49:17:e1:33:
a8:59:51:4e:7f:d6:11:bb:a8:5e:38:d1:b3:8b:31:7b:82:ed:
59:eb:03:74:b6:68:f9:45:af:a5:b2:72:69:42:77:cd:cd:2c:
a3:88:af:5b:b5:e4:0b:84:0e:0f:4d:e6:0d:aa:25:a6:eb:eb:
cf:32:3f:c3:cd:77:51:6a:29:39:67:c1:30:dd:0d:5e:5c:78:
e2:83:03:ef:0d:dd:77:61:80:c5:5d:53:e6:cc:c3:52:73:44:
4a:8e:a1:b3:15:9e:95:bf:ac:5d:01:69:da:7b:94:2d:44:4d:
36:f1:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:30 2025 by rpki-client