Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: 76Br134Vw5bCVy7aTfcybmIifI56oJbJGgJdKF4BKPc=
Subject key identifier: D7:E5:68:7F:97:67:0B:D8:73:E0:A6:22:DC:6A:D1:DF:B8:B4:50:9E
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 694DA19D0D304BFA0B80DB965994C41EEC11FD67
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS9009.roa
Signing time: Tue 03 Dec 2024 12:18:07 +0000
ROA not before: Tue 03 Dec 2024 12:13:07 +0000
ROA not after: Tue 02 Dec 2025 12:18:07 +0000
asID: 9009
IP address blocks: 66.225.209.0/24 maxlen: 24
104.245.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:4d:a1:9d:0d:30:4b:fa:0b:80:db:96:59:94:c4:1e:ec:11:fd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Dec 3 12:13:07 2024 GMT
Not After : Dec 2 12:18:07 2025 GMT
Subject: CN=D7E5687F97670BD873E0A622DC6AD1DFB8B4509E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:72:6e:1b:22:a2:5a:c3:33:5f:c2:56:a6:
27:01:bd:0d:b4:25:af:c6:35:86:bc:6d:bd:ea:f1:
8e:88:a8:c3:49:fc:06:e5:38:e1:80:ed:69:68:f2:
d8:f1:26:aa:fa:9d:b2:4f:79:c9:2c:71:54:98:18:
e5:11:84:9a:f2:f1:d8:82:d7:78:76:1f:10:0a:d6:
11:b7:69:c5:17:fc:da:92:7b:6c:2a:4f:aa:eb:d6:
3f:d9:99:e4:b9:95:2c:c1:96:b4:41:07:8e:48:36:
3a:51:47:89:f1:e8:ae:94:06:6d:3d:ed:5a:c8:b6:
35:fb:dc:63:34:07:80:fd:96:d6:e2:c2:c9:d9:71:
8c:a4:2e:22:1d:30:d6:b8:b0:c3:02:b2:5c:9d:59:
bb:c3:5a:ce:3b:59:00:3e:c5:21:cf:28:a3:81:e3:
68:b7:5e:bb:a9:1f:2d:7a:b2:a1:e8:14:af:a6:93:
7b:ed:af:76:89:00:62:2d:43:68:be:23:b9:f8:d6:
0f:bc:ad:78:bb:16:c4:27:7f:2c:a2:4b:fa:63:0d:
47:73:b0:5c:1d:b8:6d:4c:06:72:f3:43:de:6a:b3:
96:ac:69:43:b1:f0:7c:89:af:41:7d:0f:c6:a5:d2:
6e:fd:d4:65:4a:d7:ad:52:33:d8:34:0c:29:3d:86:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E5:68:7F:97:67:0B:D8:73:E0:A6:22:DC:6A:D1:DF:B8:B4:50:9E
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.209.0/24
104.245.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ad:7d:ee:2e:d3:2a:c8:42:3c:dc:d8:df:5a:3f:8f:39:f0:
de:28:22:b8:6b:74:cf:99:70:17:42:4f:94:87:a4:92:5f:0a:
df:b9:38:84:0d:a4:c3:c3:e7:15:1c:ba:1c:c7:3a:38:12:cb:
57:68:e0:7b:48:22:b5:2e:7e:35:ea:a0:12:64:14:7d:4c:c6:
6c:62:53:e8:eb:8f:04:ce:20:eb:f7:e3:aa:d4:c1:dd:0a:49:
99:74:8c:f1:a1:52:ff:da:82:8f:e7:9a:e4:c3:04:4e:31:38:
7a:85:8f:c2:2d:ba:ae:ca:a5:41:a3:b4:93:53:dd:56:52:f6:
5a:fe:aa:66:43:5e:9a:57:33:a4:e2:f0:53:74:47:d0:e4:33:
3e:85:48:43:0c:e7:0c:9a:40:2a:39:67:ee:8d:eb:7d:1e:2f:
b3:b3:64:34:46:0f:a9:22:7c:cd:50:89:85:2b:01:16:ec:ae:
56:22:31:fd:73:1b:c6:bd:86:17:bc:47:db:8b:9b:40:8c:ac:
1f:e5:5e:9d:a8:aa:b6:3f:7a:81:3a:3f:94:82:2a:db:d8:18:
65:bd:40:ae:20:7e:16:20:4a:85:a8:a6:f9:2b:2e:7e:dc:89:
ce:81:43:24:c0:f5:4d:ee:9e:46:f7:ea:5e:b6:f1:0d:6f:79:
e3:15:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:27:07 2025 by rpki-client