Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa
File: db5733de-d9ee-315a-b4ee-49bb473ee114.roa (raw, json)
Hash identifier: SUiSX/QyYAwP6mG7Ye6S3RODJDUts6L5bz4kdnjMEZc=
Subject key identifier: 78:32:DA:AD:63:5E:F1:BE:71:F1:C3:E6:2F:27:80:2A:8D:7A:1E:59
Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
Certificate serial: 010D0C9F432858494CC93F4C5C36CE6C1469B440
Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 21803
IP address blocks: 209.140.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:3f:4c:5c:36:ce:6c:14:69:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=af3479ec-485f-494b-b145-fe7500a27a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:58:27:d4:43:aa:a2:72:b9:71:b9:f4:0f:
22:a3:e0:ed:2d:39:08:8b:58:60:25:b6:60:f2:63:
24:07:44:bf:56:b9:6b:75:90:73:1b:08:8b:6d:90:
79:f8:89:e9:a2:2c:4e:5c:36:15:a3:13:6e:65:4b:
b9:93:5d:8e:63:64:77:c5:cf:47:96:08:80:4f:52:
a3:c1:f6:18:e8:24:df:c7:15:1d:dd:a1:4e:9e:a8:
d6:ac:c9:23:ae:1b:63:06:94:cd:25:c4:22:5f:22:
b1:53:2e:69:9a:c0:e9:b9:b0:c7:9e:06:d7:f0:80:
73:a7:29:08:b2:a4:dc:21:56:5a:9f:c3:68:16:4f:
e8:52:6c:78:37:0b:93:d8:76:36:ee:63:31:04:4b:
04:56:cd:74:08:ac:43:6b:32:33:81:e3:17:9f:54:
42:95:e9:d3:6f:36:17:b3:39:13:b3:64:ea:b8:df:
e8:86:2e:f8:bf:11:75:86:b7:2b:da:54:8c:be:ed:
17:4a:56:a9:52:a9:86:02:1c:04:f1:3e:85:d8:34:
a6:d9:61:dc:2e:9e:20:87:d5:3d:25:cb:02:2d:64:
91:d2:8a:05:58:28:d0:33:72:ba:d2:8b:1c:0b:eb:
9e:07:8f:2e:e9:2c:12:45:09:ba:82:1e:7f:94:b3:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:32:DA:AD:63:5E:F1:BE:71:F1:C3:E6:2F:27:80:2A:8D:7A:1E:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl
X509v3 Authority Key Identifier:
keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.140.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:dc:5d:d3:27:03:bf:1f:95:70:8b:b0:60:2a:26:91:1f:c1:
80:12:45:a5:2c:67:56:8b:08:51:4f:2e:6d:c9:c9:23:70:6f:
16:cb:0c:7d:27:e2:a8:60:c4:b6:72:2b:55:5a:6d:11:88:dd:
e7:6a:58:66:21:42:24:f3:c6:f5:a5:2d:14:8b:6a:4b:cc:52:
30:57:8c:99:ff:ec:91:25:8b:79:4a:0e:4b:02:64:f8:97:0f:
b5:7a:c2:83:4d:0e:2a:88:9b:c7:f1:a7:77:43:bc:dd:ae:c8:
eb:e3:a8:e6:2b:8c:cf:53:40:41:4b:7c:05:bb:e0:82:88:2f:
31:35:a0:e7:cb:35:77:0c:59:77:f9:28:92:0a:26:8a:0d:b1:
f5:2f:0c:13:7a:f2:da:ad:3d:88:5d:ab:07:e5:87:d9:f1:c4:
99:59:7a:c3:cd:83:13:79:2b:1c:c8:d0:12:db:de:3d:7d:dd:
04:e3:c4:38:e9:32:eb:ce:42:24:6a:74:d9:89:44:ee:54:51:
99:ca:30:1b:52:e0:a7:05:fe:8a:63:eb:cf:31:09:d5:2b:bd:
de:2c:61:4a:d2:5b:75:f1:7e:6e:1b:ed:14:38:fe:fe:8f:ce:
d6:7e:32:ec:d3:88:03:6c:ee:ff:2a:2d:b0:6a:a7:85:51:93:
5d:19:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:38 2025 by rpki-client