Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f984a998-f709-386e-9a12-6db49c1c894c.roa
File: f984a998-f709-386e-9a12-6db49c1c894c.roa (raw, json)
Hash identifier: mGDOK6TsADQ98j24zpsnh8M3pyBBdqH1/wYFt0tnbWY=
Subject key identifier: 5D:9D:2C:3F:C3:8E:C2:E3:4D:70:86:8D:68:EC:1A:12:86:6F:26:E8
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F4328584917DC251864DCFFE97E713C40
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f984a998-f709-386e-9a12-6db49c1c894c.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 394398
IP address blocks: 209.124.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:25:18:64:dc:ff:e9:7e:71:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=a585bde2-3368-4992-a4c3-9ad06b465dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:12:59:c8:d4:96:07:20:de:ad:27:9f:48:
1a:e1:3f:ff:de:e0:b8:71:85:dd:8d:59:57:09:71:
73:2b:87:fb:1c:8a:2f:dc:cb:f6:c2:5a:30:c0:86:
5c:32:6d:3b:bb:0f:93:dd:48:ed:e9:46:c8:39:8a:
6f:f1:60:73:4a:5e:7c:67:9f:00:65:a4:8f:74:a1:
be:ec:7e:20:03:46:e2:5a:72:74:f1:b3:ed:43:95:
11:78:20:db:e1:5b:b2:fd:65:09:77:d4:23:b2:86:
c4:4d:7c:2c:a1:f1:f7:65:d0:e5:f3:85:0e:31:65:
d4:62:21:9c:77:7f:6b:62:3e:70:98:92:97:bf:dc:
00:58:35:2b:32:3c:63:b6:e1:3b:ae:44:25:d3:2b:
5c:28:74:85:ec:93:84:d5:9a:9a:6b:de:c1:58:e3:
9b:83:71:c7:17:78:92:1f:ae:5f:12:9c:f1:b0:2b:
29:6b:13:08:26:73:0e:71:30:97:2b:55:19:0e:b6:
18:38:a3:2c:88:d6:3f:a9:a7:76:95:da:ec:05:c7:
7b:72:cf:0b:43:d4:a6:e7:c0:14:38:84:6a:aa:9d:
e5:71:c8:70:dc:d7:82:65:f3:1a:25:a2:a6:56:57:
9e:22:90:0c:fd:10:cd:38:3a:bd:fe:59:c1:fb:07:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9D:2C:3F:C3:8E:C2:E3:4D:70:86:8D:68:EC:1A:12:86:6F:26:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f984a998-f709-386e-9a12-6db49c1c894c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv4:
209.124.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:74:ad:b6:e3:c8:3a:a8:f0:5d:db:3f:de:6f:44:6f:2b:92:
09:f4:8c:fa:f2:85:fa:af:18:5d:a5:33:1e:98:4c:5b:12:32:
9d:9d:05:5b:59:85:a5:ee:e8:f6:21:c6:8d:f1:8c:1d:b9:d3:
0c:cb:8d:47:f8:a6:31:b6:8e:fb:75:9b:d7:e5:5c:e6:5a:69:
7e:64:6d:eb:62:13:97:9f:73:de:ff:37:97:48:c3:11:31:48:
ac:88:cc:a5:28:9a:67:c8:01:ed:a0:83:ad:75:2b:a0:ca:66:
64:b2:91:0e:6d:97:2f:e6:9e:8b:21:85:e7:e3:68:fa:fb:c1:
95:c2:dc:7a:4f:f9:9d:ad:8f:b9:ef:1a:f8:85:8b:f9:4e:73:
5e:54:f4:07:64:99:78:46:9a:70:08:40:23:fd:e1:a5:40:5d:
83:ba:26:4d:94:45:1d:a5:0f:9c:1f:2e:e3:ee:eb:9c:12:e0:
e8:22:91:a5:69:15:94:31:17:2c:f7:24:e9:dc:2e:03:b8:68:
bb:7f:ba:42:8d:d1:0d:cb:18:78:08:59:94:94:01:bb:50:68:
6d:e3:9c:cc:e1:5d:b6:c1:af:46:68:8d:ae:90:f8:ec:57:fa:
e2:77:38:40:c5:04:9d:43:a5:8d:ef:d9:d0:86:7d:58:f1:9c:
02:b9:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:12:22 2025 by rpki-client