Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa
File: 6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa (raw, json)
Hash identifier: fiw2s0xBY7q48er+uJrLkDgQPLkEG5f1G8+3PnXPF0A=
Subject key identifier: 44:90:CF:FB:C7:87:FD:49:77:FD:E8:14:52:69:C7:E0:78:C8:56:CD
Certificate issuer: /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Certificate serial: 010D0C9F432858489E6B68E982B9D8E6F911E500
Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 14618
IP address blocks: 209.127.216.0/24 maxlen: 24
209.188.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:68:e9:82:b9:d8:e6:f9:11:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=f2005bc4-5164-464d-bfb6-2ad02daf3a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:73:7c:e6:68:df:73:65:be:55:18:8e:a0:
1e:3b:82:7a:1b:42:7c:2f:ec:7d:bb:7b:eb:fe:ad:
c7:9d:f7:82:5f:f2:9b:63:7c:8d:60:ea:f7:5d:bc:
ff:a5:83:59:a1:21:eb:18:88:1e:3d:d3:42:07:91:
27:11:33:7a:d0:57:a9:69:60:44:f8:8b:1e:64:f0:
82:c8:28:27:a6:c9:72:6e:c5:99:15:2e:53:8f:e6:
2e:da:50:14:06:07:30:7f:eb:60:da:30:4e:0e:66:
cf:d8:6d:67:cc:5a:35:5f:5b:33:8c:9a:6a:60:df:
dc:6e:1b:27:e6:c1:8a:0c:98:dd:f4:3d:5a:c4:ba:
3b:34:25:02:0d:ad:9a:b7:39:a4:e1:f3:c3:d8:db:
ec:aa:c1:e0:d7:81:30:23:3d:a0:5e:dd:06:89:6b:
fa:56:48:c4:22:f3:7c:08:8b:51:87:50:0f:bc:e5:
c0:89:18:36:c2:0a:97:19:16:3f:58:f2:2c:5e:97:
bd:fe:f9:ec:c3:64:e4:f7:a8:fa:e2:9c:3d:7a:9d:
0f:fc:5b:c1:fb:7a:2e:6f:e7:27:0e:62:94:66:d3:
95:30:7f:42:39:ae:18:a3:f8:bf:57:a3:d1:d6:ba:
92:6e:73:32:fd:9c:81:2a:50:37:8e:43:4c:62:5f:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:90:CF:FB:C7:87:FD:49:77:FD:E8:14:52:69:C7:E0:78:C8:56:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl
X509v3 Authority Key Identifier:
keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
sbgp-ipAddrBlock: critical
IPv4:
209.127.216.0/24
209.188.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:62:d6:ac:22:83:bd:6b:18:d6:4c:24:49:15:fa:62:31:68:
8a:51:c4:84:19:8e:16:a5:05:84:a7:3e:38:d8:33:75:71:18:
0f:1b:dd:bd:69:07:d0:34:db:7b:3c:0a:01:d0:8e:62:43:e1:
1b:85:45:fe:e3:42:10:f0:83:79:57:24:f0:e9:57:cf:d7:22:
bc:2d:ab:2c:5d:90:42:29:20:89:a4:74:95:35:ee:40:52:3c:
83:1c:1e:4c:92:ee:30:48:7d:aa:f5:a9:de:62:ce:00:70:84:
57:f1:6a:e7:1a:66:b0:e9:2e:fa:4a:1d:52:d6:bc:34:60:87:
c1:b7:ba:a6:4e:5e:b2:d2:f7:c5:87:24:ba:27:e3:bd:9a:86:
bc:20:ef:54:e1:49:20:2b:a8:fc:77:52:f7:db:8d:d1:30:d5:
18:db:a5:76:7a:c9:00:8a:9e:21:eb:3e:38:29:60:61:55:04:
72:3a:d4:20:ed:d0:1a:b6:a1:59:5e:de:e4:47:48:35:aa:f8:
34:0b:b8:bc:61:da:64:37:b0:1e:29:c4:43:92:2b:c2:b7:98:
1b:ba:f4:19:7c:f3:c1:da:3a:f1:23:c3:e9:67:22:90:13:5e:
b4:ca:8c:f2:13:a0:4c:eb:8d:f5:51:89:58:a7:53:7f:2d:3e:
8f:6d:bc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:34:51 2025 by rpki-client