Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/25164ba1-f06b-347e-8764-cf13e4daaf78.roa
File: 25164ba1-f06b-347e-8764-cf13e4daaf78.roa (raw, json)
Hash identifier: 5eywZ0TUpPa1nRRaKi8v9jh1IxxFR/D13u9CQaTtRGU=
Subject key identifier: A1:9C:D2:7A:91:6A:1D:69:56:44:5A:0C:A5:32:29:B6:BB:93:E7:31
Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17
Certificate serial: 010D0C9F432858486D904E659FC0B85B93D4C6E0
Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/25164ba1-f06b-347e-8764-cf13e4daaf78.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 22157
IP address blocks: 208.71.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4e:65:9f:c0:b8:5b:93:d4:c6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=e8970e6e-f7c5-4c81-811b-6b65f8391682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:f1:a2:c0:02:87:f1:49:85:1c:f0:51:4b:
47:d6:4d:d1:1e:3c:fa:e7:dc:8d:d1:40:64:39:d6:
57:05:49:68:6e:59:51:08:43:44:c9:60:0b:67:1f:
96:fe:cb:b9:d7:58:a0:f8:f2:3b:5b:ac:74:fd:f6:
74:a1:d2:76:3f:ac:93:84:fc:81:58:71:bf:ea:89:
4a:85:d3:4a:97:b4:53:94:91:fa:57:7c:4b:c8:4a:
59:48:49:26:be:14:b7:d6:ef:2a:bb:ba:6a:20:41:
f1:28:33:dc:3d:2f:13:84:6b:46:ea:8d:08:a2:9d:
08:b4:9a:74:bb:64:5c:cb:73:d4:37:f9:f1:b8:04:
59:dd:7f:86:99:18:e9:57:44:0f:be:4a:13:18:9d:
89:bf:04:b1:30:eb:a3:6e:5b:dd:b3:2b:04:50:8e:
b6:4f:47:74:b8:3f:d4:11:fb:0b:b2:05:88:10:df:
5b:af:3e:4d:a4:4d:34:a7:81:2b:44:c6:1c:35:c9:
ef:6c:4a:4a:35:3d:62:ee:b2:76:df:9f:1d:06:be:
db:c5:5d:f4:f6:8a:ea:40:93:19:e3:2a:d8:cb:95:
ae:f2:90:05:6c:b7:df:1b:cd:00:82:f7:c9:e3:67:
6a:78:35:1e:de:da:14:19:3d:db:a8:ae:10:b5:ac:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:D2:7A:91:6A:1D:69:56:44:5A:0C:A5:32:29:B6:BB:93:E7:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/25164ba1-f06b-347e-8764-cf13e4daaf78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl
X509v3 Authority Key Identifier:
keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer
sbgp-ipAddrBlock: critical
IPv4:
208.71.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:0d:48:62:53:da:c6:7a:99:8e:94:9a:7b:97:05:09:14:82:
6f:df:b1:ac:a5:87:11:6c:66:3f:47:c1:ea:9d:4a:df:86:88:
a6:04:6b:32:86:71:b9:32:e6:39:3b:69:55:4e:f4:25:30:eb:
a3:10:25:98:88:1f:86:a6:f8:88:c6:13:80:79:48:14:7a:fb:
7e:1b:b6:8a:84:a4:de:e4:cc:b7:13:7f:1e:06:d1:e5:4b:5f:
2c:0a:89:81:b5:44:be:a5:82:29:a5:6a:5e:8b:e8:dd:d3:16:
fc:25:2b:2b:c7:d8:99:57:69:54:93:18:a5:f4:8d:3e:07:0e:
e5:d9:e3:c1:fe:37:b9:17:bc:be:42:c1:3e:29:2f:08:f6:94:
1a:32:4b:54:c8:4d:c0:1b:aa:9d:1f:17:2c:7a:a1:79:13:3d:
5b:d6:99:5d:6c:2d:08:88:84:de:a7:a5:02:f5:0e:c0:9e:35:
dc:9d:c5:7e:b4:4c:2a:44:11:71:71:13:5c:d6:e1:97:8b:46:
73:30:d2:2b:09:3f:9e:a1:62:11:3c:e9:7e:a3:16:9e:8a:a0:
eb:59:98:71:7d:ad:1c:1f:96:38:1a:ed:59:be:52:d1:e4:c9:
57:7c:83:16:0b:a5:6b:c0:3b:9a:64:14:14:99:27:0c:0f:17:
18:d3:e7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:31:13 2025 by rpki-client