Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/302e6029-3314-3fe6-8fd7-c1a0559db604.roa
File: 302e6029-3314-3fe6-8fd7-c1a0559db604.roa (raw, json)
Hash identifier: PmOQeys7A771dVZ6jFCBBERE/dD/BhTM790nebL6Dj0=
Subject key identifier: 9A:B3:97:A4:5C:66:9D:FA:19:FC:E4:92:A1:21:45:9D:20:E4:EC:64
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F43285848897B21C53998C497408FC42A
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/302e6029-3314-3fe6-8fd7-c1a0559db604.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 2152
IP address blocks: 209.129.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:21:c5:39:98:c4:97:40:8f:c4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=9f8fcc77-4263-4794-91df-d2577ef93343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:5e:13:a0:49:d4:db:16:fd:22:f4:a0:a1:
6a:13:a3:7c:92:33:62:ff:71:9c:95:ef:71:93:ea:
7e:ba:23:d1:95:f3:8a:03:e4:0a:e3:c4:8a:5e:d1:
b6:ea:0a:aa:1e:e0:dc:05:61:12:73:11:bf:c4:62:
ca:39:a5:39:d6:56:b6:82:d3:c0:78:bc:2f:2d:c8:
04:2b:43:a0:d2:75:80:0c:81:97:2c:80:78:15:7f:
65:ce:f7:ff:bf:be:00:e2:5d:82:25:ac:69:ac:e7:
cc:eb:fa:9d:f9:32:f1:aa:2b:f1:95:77:48:82:4a:
da:95:d8:38:34:4a:a5:82:b7:d5:bd:1d:81:ea:94:
05:8c:e6:2f:cb:73:c9:00:44:e7:12:51:f1:95:b0:
d6:21:32:dd:06:b0:0b:d4:6c:ac:88:d5:b4:36:5d:
5a:b3:51:61:17:1f:d5:8e:8c:10:63:4f:79:5d:4d:
ee:c2:0c:30:cb:8a:74:37:9f:03:99:55:1b:16:f8:
41:f4:e0:72:d4:6a:2f:a1:28:de:45:16:65:86:7e:
9e:57:0a:0c:7d:97:44:5e:3f:f4:d7:a7:0d:ac:47:
1d:3f:43:f6:f8:79:84:6c:4d:02:a5:dc:6a:e3:28:
0b:53:48:bc:fd:18:3c:d2:17:37:8e:2b:f3:59:f5:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B3:97:A4:5C:66:9D:FA:19:FC:E4:92:A1:21:45:9D:20:E4:EC:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/302e6029-3314-3fe6-8fd7-c1a0559db604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
209.129.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:a4:da:82:5a:29:a8:91:19:dc:a0:a4:20:b9:1c:8a:a2:b4:
75:2b:2a:a7:8f:35:4a:92:33:1c:92:91:32:be:52:bb:66:4b:
48:57:84:8c:a8:bf:15:95:a9:d5:9b:03:84:33:82:8c:2e:1d:
85:8e:e7:d5:8a:73:b2:d1:78:37:74:b3:15:ab:f8:a8:6b:5b:
6c:7c:ae:a6:2a:34:ab:5f:94:01:5b:d6:78:ba:7b:a1:1e:58:
77:15:a2:0d:ed:38:15:66:ae:36:3a:64:d2:84:b9:07:f7:bc:
4a:17:a9:e3:2c:be:f9:05:98:ac:8b:ad:a2:d7:31:6d:26:47:
02:08:25:f6:34:aa:fb:25:74:51:d8:fd:46:59:93:e6:8d:98:
ad:c2:2e:b3:3f:b8:90:00:ca:f7:b0:eb:e2:5f:18:f4:47:a4:
62:94:8c:98:a8:b9:21:39:d2:93:52:ec:1e:f4:6b:6e:3b:a1:
2f:d4:26:4f:48:78:3e:85:7b:78:61:18:5e:ee:0e:df:5d:bf:
3f:e5:31:71:bd:ae:f0:b4:20:57:22:1f:08:95:3b:92:4b:e8:
fe:e3:3e:29:f7:1b:08:37:00:a5:ab:16:d4:f8:66:cb:a9:25:
5a:c0:05:1f:42:31:19:cf:cc:ab:5f:ac:eb:17:bc:50:24:8b:
0b:c7:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:48 2025 by rpki-client