Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/521f6719-a6d4-3f44-ac2c-aa963efbb005.roa
File: 521f6719-a6d4-3f44-ac2c-aa963efbb005.roa (raw, json)
Hash identifier: O3+N+T+735XtO1iIUPko1bjD7WmwGDE0nTiQ75JJkmY=
Subject key identifier: F2:DF:5B:0B:AB:36:D4:D4:B9:0B:A1:AF:A7:34:7F:B7:B3:6C:B9:D7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926BAE4D64D1C3B647B7FC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/521f6719-a6d4-3f44-ac2c-aa963efbb005.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 394996
IP address blocks: 209.51.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:ba:e4:d6:4d:1c:3b:64:7b:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=e867257b-dbbe-45de-b38b-75be24da2fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:c4:0e:a4:e9:87:20:a3:f0:aa:d8:21:60:
01:3a:8f:ba:5f:5c:71:eb:9c:64:99:a1:dc:a1:13:
bf:77:d5:04:09:3b:52:56:5c:0b:af:ac:13:e5:36:
38:de:c0:00:00:d2:f8:e8:9d:e4:cf:af:bc:e9:05:
06:a1:87:18:73:82:4e:0e:2b:da:81:e6:5d:9d:24:
e4:b0:0f:13:5e:d9:2d:32:c0:22:9c:38:1c:c9:a1:
48:1d:49:7a:3b:5f:e0:5b:ae:39:f9:94:fa:3b:c9:
22:8b:38:de:83:a3:bf:0f:1e:b4:df:62:a5:cb:cf:
d1:9d:f3:91:8b:ca:12:e4:f8:11:b0:26:17:2c:e5:
21:52:7e:69:32:66:13:e0:d9:b9:fb:22:16:d3:04:
12:af:4a:eb:4f:d4:46:ce:3b:c8:92:9a:58:89:7b:
4e:9f:d8:89:e5:46:61:11:1c:c1:31:6a:16:27:cd:
fd:7f:b7:30:61:ff:c1:b1:d1:7b:8f:f6:25:72:72:
09:44:46:01:f7:68:06:93:37:c9:d5:20:7d:86:ea:
4d:6a:89:ba:3c:9d:5f:9a:7c:26:62:a3:9c:55:21:
f6:60:a5:7e:69:0f:e3:aa:33:1d:67:db:8f:a3:0d:
4b:80:15:f7:3f:42:7f:11:04:9b:c0:87:f0:d9:0b:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DF:5B:0B:AB:36:D4:D4:B9:0B:A1:AF:A7:34:7F:B7:B3:6C:B9:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/521f6719-a6d4-3f44-ac2c-aa963efbb005.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:88:c6:52:30:c4:f0:54:d0:1d:14:41:ef:6c:6f:8e:c7:b9:
3c:c7:9b:f1:6f:f6:63:d1:a7:25:db:0e:46:4e:f6:67:45:3d:
19:f6:cb:82:1f:0e:df:dd:c1:08:01:78:45:b2:6f:0e:2e:2f:
5f:fe:db:22:46:e8:14:16:81:29:53:57:b0:e3:62:94:8d:42:
5c:ba:22:74:5d:57:9a:65:16:b4:38:ad:05:b6:e3:54:62:9a:
26:3b:29:6a:56:75:4f:4b:0e:96:12:19:50:64:b9:56:39:57:
55:5a:0f:80:01:d0:97:0e:69:a0:5f:94:9d:5e:e3:8f:93:56:
3a:87:25:31:d9:28:7e:33:de:21:44:22:eb:9d:cc:a2:56:9b:
cd:dd:0f:78:78:88:58:bc:df:f1:d2:0f:10:eb:85:cb:07:57:
d2:e4:d1:2a:b1:5e:64:42:d5:f1:e9:55:c9:61:07:18:7c:7a:
75:6a:3c:dc:7a:a0:f3:89:57:35:1c:97:c2:90:fb:11:4e:17:
6f:1e:8c:a8:65:99:dd:52:4f:51:49:00:70:cc:b0:94:a4:33:
a0:79:01:e2:7d:76:b0:08:60:44:98:c4:34:40:98:e6:51:9e:
42:e7:1c:59:5b:16:72:9e:8c:72:f4:8c:aa:cb:47:af:02:7e:
3b:eb:f6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:43:15 2025 by rpki-client