Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa
File: 2d941046-d327-388c-9f7a-ab2771f7f1a4.roa (raw, json)
Hash identifier: nuyFZO1CsP37Q3jFgXboscXbIHEEknLfUhzZHvKENQE=
Subject key identifier: 38:28:78:14:E1:43:8B:44:BC:C0:D4:34:3F:EB:73:90:C6:08:AC:52
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F43285848F65BDCF411837A96AF1F3B80
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 12129
IP address blocks: 209.124.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:dc:f4:11:83:7a:96:af:1f:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=382f9400-94ee-4d4f-b598-b07263c4b65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8c:f3:64:1e:a4:3c:8d:11:9d:cc:ba:2b:59:
c0:c0:32:50:88:ac:b1:30:3a:94:04:2b:58:df:fb:
1f:da:3f:ea:c0:63:f0:f6:20:d2:08:64:52:31:5d:
ec:e6:8b:6e:94:6d:71:85:e3:03:c6:91:c7:c9:62:
33:7f:3c:da:a6:5b:81:c8:d2:4d:71:1a:81:c2:f9:
55:61:61:01:d4:83:91:d6:76:52:95:28:80:0e:09:
47:a5:ef:f0:0e:6f:03:3e:59:6c:39:9e:39:75:43:
24:c4:1d:6f:73:02:29:b6:e7:16:8a:92:59:ec:39:
31:fd:ba:3f:59:88:1a:5a:b7:84:d5:3a:01:da:9a:
81:1d:35:6f:55:f1:5f:4d:d3:49:d1:98:e8:41:cc:
20:15:2a:7c:76:df:9d:e7:5a:7d:fd:6e:cf:a1:e0:
00:1c:19:ed:31:ae:ec:67:e2:e3:a1:d3:46:bc:b1:
f0:cd:93:f4:c4:26:7f:ae:1e:f0:b2:b5:22:7f:d9:
21:01:d4:38:37:79:8a:8e:62:ae:56:cf:84:00:bc:
a3:00:1e:7b:ff:c7:c9:10:2f:74:11:a2:d5:44:a1:
94:b8:13:18:b1:56:cb:40:b1:bc:0e:21:aa:f5:a9:
71:3d:0f:ba:92:da:15:f3:23:00:d3:46:a5:93:43:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:28:78:14:E1:43:8B:44:BC:C0:D4:34:3F:EB:73:90:C6:08:AC:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv4:
209.124.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:89:21:a8:41:6a:25:45:93:72:9a:14:d4:b4:56:fa:4b:fb:
00:df:2b:ab:8a:5b:58:48:d8:41:b0:1c:de:0b:32:53:4c:1e:
c7:ec:9e:40:d8:8b:0d:d9:e6:21:9a:92:92:3b:89:c7:d8:74:
f3:cd:67:cf:f5:8c:7c:7f:c9:7c:92:2f:8a:14:f5:5a:be:c5:
77:67:b1:c6:8e:5b:b5:0e:7f:f7:0b:36:24:ff:55:48:67:7b:
41:61:d2:e6:69:63:67:1a:a6:73:a8:f9:c6:dd:2a:7e:1a:01:
46:8d:7a:53:cc:3c:ca:1e:3f:b2:ca:70:dd:b4:fb:ad:08:69:
1a:ba:61:a5:07:aa:ac:6d:c8:60:52:cc:e8:7c:a2:18:9f:47:
2e:9d:3d:0b:b6:b6:44:f1:60:75:1f:4c:5e:2f:75:f6:a5:ea:
09:88:6b:33:98:ff:85:89:e6:0b:e8:68:f0:a7:5f:79:55:36:
7b:f4:79:57:90:d0:f9:62:67:e5:19:f1:bc:3b:5b:dd:c8:79:
be:34:46:49:ef:c8:d4:9d:58:bf:8a:94:8b:a6:a0:08:35:21:
c7:e0:91:57:1e:e5:74:40:48:c3:ee:e3:5f:2d:bb:8b:30:73:
0c:b3:fc:23:c7:a3:de:d5:d9:e0:4d:5a:27:3c:1e:34:c9:e2:
c5:e6:a7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:31 2025 by rpki-client