Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/6e44f97c-d966-372b-91ba-e139e574fc4e.roa
File: 6e44f97c-d966-372b-91ba-e139e574fc4e.roa (raw, json)
Hash identifier: xQl9SMqubsY1h5GLB6TXlZY66cXNSTx78A+TEkune0c=
Subject key identifier: 92:6E:F7:5F:F7:68:3D:CC:2F:E2:52:E2:57:C7:F6:05:1C:8B:2E:88
Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial: 010D0C9F43285848EF6155814DD9636B063A2F80
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/6e44f97c-d966-372b-91ba-e139e574fc4e.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 6639
IP address blocks: 209.27.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:55:81:4d:d9:63:6b:06:3a:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=c2b04bfe-a4e8-46b5-90ba-e7da1f314f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:00:70:c2:14:81:b4:1f:ee:f5:68:af:2e:b2:
f0:ee:d5:57:ca:1e:81:77:13:c0:99:95:c1:5e:6e:
21:1a:40:83:01:36:1b:f8:c2:38:d6:9c:56:c9:e3:
68:85:62:41:b9:84:2f:8e:84:a0:9f:b6:63:0f:3c:
87:d5:fe:04:70:b5:6e:08:76:b3:ef:ce:9e:6b:a1:
4e:de:72:cb:c9:97:46:ac:96:61:ca:c7:31:0e:76:
9e:e5:70:06:2c:c5:b5:07:94:9e:e5:de:b9:6e:1a:
a3:bf:52:53:0f:e6:05:06:0e:4f:95:ab:e0:3e:69:
29:52:01:f2:6c:f0:12:64:1b:19:05:c5:8e:cd:11:
64:5a:fb:44:db:d9:29:fa:03:eb:10:29:c2:cd:4e:
81:cd:56:ca:d1:9e:65:d4:fa:94:99:c6:aa:83:da:
31:4b:e0:53:ea:7f:ef:75:7d:a8:b0:2e:97:d0:97:
d7:b3:6d:3b:86:3b:fd:c3:e4:8e:5f:a8:0b:52:3c:
0d:27:a3:5e:88:e6:61:b5:78:27:1c:f6:bd:d3:d3:
74:b0:3e:f1:45:97:f8:05:90:06:7d:98:44:32:33:
d2:84:1e:d9:d0:7e:d2:ad:c7:01:a9:eb:73:b1:55:
bf:a0:42:db:ec:84:13:57:e9:0c:59:2a:a5:f1:7c:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6E:F7:5F:F7:68:3D:CC:2F:E2:52:E2:57:C7:F6:05:1C:8B:2E:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/6e44f97c-d966-372b-91ba-e139e574fc4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
X509v3 Authority Key Identifier:
keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
sbgp-ipAddrBlock: critical
IPv4:
209.27.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:fb:cf:5b:95:88:f3:67:fc:a1:22:a8:ec:5e:00:b4:bb:6f:
f7:dc:5d:56:28:c7:f6:b7:b4:bc:a6:9d:cd:d7:2a:7b:aa:7b:
30:97:70:9d:1f:69:25:a9:b8:48:0f:97:5d:f6:51:2f:7c:34:
d6:58:8f:99:1f:50:87:9d:ca:1c:2d:da:d1:d5:7c:8d:5f:d3:
ff:b8:b7:37:28:c8:d0:21:78:64:a5:53:23:7f:5b:d1:09:80:
7a:f8:03:20:58:32:dd:7b:01:8e:d4:80:98:27:81:5d:df:43:
02:9e:ab:93:c7:7d:33:83:2e:73:4a:00:d4:60:d4:7f:31:95:
af:d5:ba:e2:78:bd:42:0f:69:50:dd:b3:b8:aa:f4:63:76:19:
77:22:0a:82:f6:a5:53:19:b2:44:4e:38:1b:ca:0d:41:57:e6:
f1:27:15:9b:a0:1d:cf:c4:13:fb:75:7c:2d:cf:68:7f:16:d1:
b2:36:e0:d8:80:cb:31:8b:80:63:45:ed:ad:e1:33:d1:b4:e4:
e4:14:6a:d2:71:95:b1:95:06:48:18:22:16:9e:f9:b8:02:8b:
72:d5:82:ff:b3:fa:d6:8a:48:9e:4b:b5:c6:50:1f:9e:11:21:
d4:25:0c:4d:ec:ea:0f:aa:3d:ff:60:63:b3:71:24:75:17:23:
68:0c:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:35:00 2025 by rpki-client