Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ffa2ee7a-93af-3463-84fd-957901863756.roa
File: ffa2ee7a-93af-3463-84fd-957901863756.roa (raw, json)
Hash identifier: cOWQOd9K+SJSqwWXq+lKT7Y5CgJyK6M5bgKf6BZDQ7Y=
Subject key identifier: C6:B8:7B:4B:0B:6C:41:8A:A6:EF:48:57:F5:C5:A5:44:FA:8A:48:EC
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F4328584900216C7FBC6A41D5043B9400
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ffa2ee7a-93af-3463-84fd-957901863756.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 13445
IP address blocks: 209.197.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:6c:7f:bc:6a:41:d5:04:3b:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=0c643e81-68aa-43e9-b91b-178de9c039b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:22:ba:82:f9:b0:d7:d8:66:9b:f0:3b:e2:a6:
63:37:35:7c:4a:e8:68:d6:7a:21:77:f7:92:7f:3b:
3b:f0:5c:03:f7:f6:1f:25:9e:28:ed:05:2b:7d:f3:
d8:b5:4e:0f:3a:03:e4:35:2c:40:fb:da:ba:e7:30:
1e:ef:93:f2:06:1b:b9:36:da:1a:f5:6e:cd:83:06:
61:f6:ee:77:cf:ac:70:cf:86:ff:1f:a6:11:e7:c8:
c0:ec:e6:9b:9d:60:b2:ab:a7:49:92:bf:6f:65:c3:
8c:7e:96:b5:06:34:b5:32:7e:fe:5f:c2:3b:01:08:
7f:58:ce:f7:16:85:f9:6e:dc:a1:0c:00:a7:12:3d:
74:8e:c1:36:f8:77:51:1c:28:a8:6b:87:fa:31:8d:
de:ff:75:b1:07:ad:38:66:43:38:35:25:e4:7d:bb:
0c:dd:fa:2e:51:82:7f:6b:e6:33:ef:58:85:a2:94:
3a:39:82:63:9c:3d:40:b9:75:6b:f8:89:7d:c2:a3:
74:14:23:e1:f4:01:bd:24:ce:1e:b3:14:2e:d3:26:
42:cd:a9:c9:99:b8:ae:31:f4:eb:82:33:48:9c:e8:
b5:ff:4d:8a:e7:31:7e:ef:43:23:fc:73:99:45:02:
aa:3e:cd:de:f8:e8:8b:0e:60:f6:27:2a:d1:8c:0c:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B8:7B:4B:0B:6C:41:8A:A6:EF:48:57:F5:C5:A5:44:FA:8A:48:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ffa2ee7a-93af-3463-84fd-957901863756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv4:
209.197.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:42:aa:ac:11:4c:68:dd:5b:31:95:b4:29:85:ff:c9:c7:52:
eb:b7:64:0d:e2:7c:f3:6b:2d:81:4d:e0:87:c1:2e:77:68:25:
06:d0:12:04:76:d5:6a:e8:18:b6:6d:53:44:c7:9c:c1:7c:4e:
d3:30:e4:2a:07:f7:50:27:d3:2c:f4:62:39:76:db:b0:b3:2d:
8c:2d:50:85:93:8f:c0:c6:9b:7a:f5:d4:0b:0d:23:7b:a4:2e:
88:6a:2e:46:8a:4d:8b:18:d5:0a:9e:e5:ef:d0:e6:fb:0c:9a:
d2:b4:5a:bc:b1:aa:d4:78:fb:5a:f6:2a:37:3b:f4:3d:40:80:
f9:13:6b:4c:b7:2a:17:0a:4c:ac:f4:66:bd:ab:26:e2:18:5b:
4b:7d:6e:95:15:67:94:66:76:2f:d5:02:49:c5:d2:83:09:30:
1c:1e:f2:55:64:f9:c2:0d:2a:26:70:91:d7:b0:5f:e3:a5:1c:
bc:d2:c9:94:2a:d6:63:0d:f7:f1:1a:75:86:04:71:c5:4a:fa:
ce:f1:46:b7:05:5d:46:5a:ac:8d:6d:71:44:c6:79:5a:58:a6:
67:f6:01:ff:ce:c0:a3:55:81:23:79:e8:25:c2:a2:7c:a8:d6:
66:27:b2:ba:88:c4:e0:d4:78:db:0d:1c:26:aa:dc:cf:92:9b:
ef:c7:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:15:32 2025 by rpki-client