Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/80f1eb6b-5051-3e9f-ba47-2cf5e6359edf.roa
File: 80f1eb6b-5051-3e9f-ba47-2cf5e6359edf.roa (raw, json)
Hash identifier: IdJAOc8/0ADxuydUCqaNi9puySgYfbQD7f4tT9AHie0=
Subject key identifier: 11:BE:5A:B1:36:89:34:D9:44:64:8F:BC:86:14:3F:53:24:84:17:21
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7897D8277430C0AFC2EF0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/80f1eb6b-5051-3e9f-ba47-2cf5e6359edf.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 3848
IP address blocks: 209.139.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:89:7d:82:77:43:0c:0a:fc:2e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=3a4b3750-56c4-44fc-8be7-6cffc8752d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:b2:da:e1:d3:cf:50:5e:a6:d6:51:2e:df:
39:b5:c9:c2:76:97:7b:f8:2b:b4:b3:dc:64:b9:18:
67:61:8a:db:53:bd:99:c1:77:28:b3:87:58:07:fe:
44:45:89:91:95:f8:f0:d9:82:ad:e9:30:a3:c8:64:
86:e4:f0:13:ec:0e:aa:1d:79:0b:36:38:a9:86:f3:
b6:df:72:8b:4e:3b:0b:64:f0:1f:b4:10:8f:59:74:
11:e2:22:4a:2c:56:ba:cb:f8:6e:36:38:f9:a8:1a:
84:3c:ef:e8:12:25:ca:b2:a7:e1:b6:b4:18:dc:65:
32:c9:10:27:bc:71:4b:9b:9d:fe:d2:f8:46:e8:be:
c9:ff:29:b2:a5:4f:c3:df:cc:70:b7:c1:c5:e7:f1:
5a:e8:22:61:fa:11:d1:6e:9f:30:73:a2:e3:54:9e:
d8:d8:5d:56:5b:e9:cd:7a:2f:1e:eb:31:71:e4:9b:
e3:4d:45:b5:4f:31:5c:49:6c:80:05:ee:77:33:84:
00:0f:60:c5:c5:a8:a2:02:e4:7c:a8:dd:43:15:17:
05:8e:53:5b:16:22:a3:ab:f9:80:f5:ce:4d:c8:2d:
6e:b9:8e:cb:92:73:68:ad:e3:3c:a7:c2:23:fb:45:
fc:bf:6a:e4:2c:ef:a3:23:8a:96:f6:13:62:ce:31:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BE:5A:B1:36:89:34:D9:44:64:8F:BC:86:14:3F:53:24:84:17:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/80f1eb6b-5051-3e9f-ba47-2cf5e6359edf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.139.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:61:f8:c1:58:47:12:14:15:6b:56:6a:56:10:12:11:47:a2:
11:36:d3:e0:85:6c:91:2d:88:a1:ad:ad:82:f2:21:71:b9:c1:
a3:48:a8:82:db:e3:9f:ed:ec:b0:81:f4:6f:0e:c1:ad:b5:3e:
3f:e3:67:4c:81:23:23:15:19:8b:f8:08:6c:4d:f5:80:08:de:
30:83:b9:ae:da:43:6d:29:01:23:35:d6:7b:02:3a:24:ed:7d:
02:14:a6:10:5c:4d:2d:d8:27:4f:da:81:19:51:04:c5:8b:27:
19:22:94:fb:c2:91:f8:d0:0b:78:6e:ff:e0:3d:30:5e:b3:71:
6d:0c:25:be:fc:5f:00:26:ef:da:fc:84:31:f6:5d:a8:f4:4a:
c7:4e:46:6d:b1:a9:0d:73:57:7b:98:50:c4:6c:cf:16:ea:56:
9e:e5:58:5a:4b:f7:aa:5b:ae:d8:a6:79:e8:e1:c5:f3:11:bc:
88:86:3c:6c:63:e4:8e:ea:db:90:d3:e3:22:98:c2:db:1b:19:
c1:d5:06:13:56:8b:1e:a5:d1:8a:54:a5:73:23:44:03:28:00:
07:ba:0e:ea:af:66:8f:dc:09:5e:9b:a7:b3:dc:4b:04:a8:ea:
b0:54:48:2c:8a:92:1b:bf:39:93:80:d1:ec:8e:1a:c9:c8:85:
39:8f:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:45:47 2025 by rpki-client