Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/59c985f6-423f-32c7-86e4-5f836bd897fe.roa
File: 59c985f6-423f-32c7-86e4-5f836bd897fe.roa (raw, json)
Hash identifier: vn0Tt8MZ+rFU4BrYuxbIEh1GAiLTM2ZgmugCXM5YMx4=
Subject key identifier: 51:AF:DF:AE:6F:28:9E:59:9B:36:6D:7C:17:43:82:7A:98:20:E6:6D
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F432858481C9A92457C79D2DE8A2D5D80
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/59c985f6-423f-32c7-86e4-5f836bd897fe.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 1004
IP address blocks: 209.112.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:92:45:7c:79:d2:de:8a:2d:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=46caa7e3-d484-4a42-b726-cd974322c11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:16:8c:81:a4:46:fa:5a:26:57:3d:00:f0:79:
d0:65:ed:61:08:c5:59:1f:d5:97:1a:e7:6a:d2:a1:
c7:4f:61:4a:8e:bd:33:1f:df:f7:84:8b:8c:29:c6:
b2:10:d2:d4:db:34:3a:27:87:76:76:3f:72:13:96:
a3:5b:e4:47:98:83:57:33:64:66:09:51:8d:95:05:
9d:f8:ed:1a:06:b2:27:c9:79:08:28:eb:54:a3:9e:
32:79:9a:f1:5e:40:18:7f:d3:22:8d:77:cb:e1:24:
bb:54:b9:13:c0:59:22:b0:8c:d2:6f:cb:c9:9d:44:
b5:77:ab:72:d7:6d:09:85:08:e4:07:a5:58:73:ee:
dc:b8:e1:17:db:7e:d2:13:65:c8:5a:b8:20:98:a7:
97:6c:a3:80:e5:d7:1b:ec:e7:a3:58:ac:bd:af:52:
a2:61:69:64:5c:59:0b:b4:01:19:b1:5e:66:5d:ed:
f5:3f:e4:27:f6:89:c1:48:65:58:d5:cb:4a:4e:da:
0a:b8:11:b3:80:31:eb:fe:9d:7d:ec:29:41:90:d0:
74:ee:cb:fd:63:50:81:bf:61:f6:74:49:21:ed:7a:
98:b7:8f:e4:7d:cd:01:d5:da:a0:f7:29:7b:b5:e8:
49:e8:e2:6a:b6:87:99:e2:5e:09:e2:8b:ac:28:d7:
95:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AF:DF:AE:6F:28:9E:59:9B:36:6D:7C:17:43:82:7A:98:20:E6:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/59c985f6-423f-32c7-86e4-5f836bd897fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:37:14:45:4f:75:40:42:04:93:3a:27:88:7b:8e:f2:4f:74:
75:32:25:18:67:44:a9:bf:49:06:14:94:f2:44:11:bc:d3:4f:
b9:c2:69:4a:39:25:99:69:47:cd:91:3f:26:4f:41:24:b0:2d:
29:2b:2f:ee:fc:69:f7:e2:d3:fb:c9:c0:75:2f:ff:8b:d1:cb:
3a:91:7b:53:b8:99:5c:83:cd:15:d7:54:bf:a3:21:66:ac:75:
dc:91:7e:9b:63:7c:24:0f:a7:01:39:57:d7:ed:ec:cc:6c:af:
dd:99:71:fc:de:35:f1:4b:79:e5:e9:d6:fb:db:cf:ea:1a:8d:
0d:30:29:fc:80:fe:9f:b1:0c:57:08:bd:d6:73:d1:6e:be:fd:
c7:4a:7f:eb:fa:10:23:06:6f:b1:27:66:24:a4:83:7a:24:fa:
0c:72:5a:5b:cf:6a:3d:ba:fd:ad:28:e7:60:4a:01:10:b4:ae:
53:47:d8:64:4c:0a:02:0d:d0:a1:dd:86:e8:a7:59:44:cb:72:
f0:2a:c8:ed:35:b5:33:c6:ec:b9:3c:18:b1:d6:56:22:03:12:
06:02:cc:05:fd:3c:22:bb:d4:df:f3:fa:c8:4f:89:ae:36:a5:
bd:35:45:b5:79:e4:f0:6c:38:00:59:69:15:2a:b7:1d:9c:fa:
c3:06:29:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:03 2025 by rpki-client