Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fad779f-5c84-39ec-8c6b-279839a11bac.roa
File: 4fad779f-5c84-39ec-8c6b-279839a11bac.roa (raw, json)
Hash identifier: yC4EXDuybOjpQuBeZPvgs5eSOVLR5PAuW3Ks5b+RUAE=
Subject key identifier: C2:42:28:9C:97:DA:50:E7:3A:AC:E9:37:DD:72:35:99:15:54:D2:9F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485B6B063242C47254923C5B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fad779f-5c84-39ec-8c6b-279839a11bac.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 209.131.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:06:32:42:c4:72:54:92:3c:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=896c2cb3-0889-4847-addd-5558c012e43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:3a:8b:30:82:2b:2d:5e:bd:93:ab:da:3f:
01:ec:44:db:1e:54:cc:0c:5c:fb:7d:87:df:78:fa:
12:f7:b6:97:7a:13:d8:2a:0a:a7:2b:38:cf:ea:98:
1f:ac:5b:53:0a:76:f7:f5:d7:73:0c:b1:3d:19:5b:
95:56:1e:78:52:0c:62:4b:37:ec:7a:8f:95:8d:63:
df:ad:94:b1:cf:51:de:90:2d:6f:1b:19:df:65:0e:
39:5d:1b:6a:f3:ba:78:a8:a7:e5:d6:47:df:05:61:
ba:b9:50:d0:a6:b5:f5:4a:07:0d:3f:72:59:37:0e:
d2:b3:f2:d3:0e:6e:5b:34:32:ad:3e:ae:1c:13:ea:
02:7b:a6:43:76:50:5a:87:ac:64:cf:63:9e:9a:29:
01:6e:49:41:2d:32:dc:bd:fd:59:1c:a9:5b:a1:00:
67:7e:6e:2f:ef:14:3f:e5:a3:13:6e:74:e3:7e:cb:
ad:e3:89:ba:6a:5a:af:82:0c:e3:18:71:27:9b:06:
38:2a:d6:65:be:82:7c:4c:86:84:9b:0c:d7:fe:75:
99:5e:b2:dd:7f:a6:06:e2:12:44:08:9c:22:b0:be:
4a:86:5b:70:53:7d:cc:32:02:10:6b:cd:e1:3d:2f:
b7:ae:f3:16:14:0b:69:a3:bf:92:42:34:69:6e:97:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:42:28:9C:97:DA:50:E7:3A:AC:E9:37:DD:72:35:99:15:54:D2:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fad779f-5c84-39ec-8c6b-279839a11bac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:92:9f:85:3c:4c:6e:b1:ca:d4:97:99:9e:26:18:c3:ae:1e:
55:4c:92:c2:3a:bf:ef:e6:10:37:8d:cb:38:d9:54:b3:3e:99:
f9:89:9f:ec:67:59:62:76:37:83:db:8a:b2:41:1d:79:dc:ed:
d9:64:9a:07:2c:66:30:4b:d4:e8:8c:1e:b5:39:33:57:a6:07:
82:99:ca:4c:b8:c5:ab:e9:a4:55:48:3c:d8:d4:b7:b4:9d:6b:
3b:85:45:62:5f:1d:66:cc:6d:da:79:1c:a9:30:79:16:cc:4c:
27:a0:de:03:e0:46:24:95:a8:55:f0:af:5e:6b:e0:e0:32:77:
d3:2f:fd:7d:87:54:81:af:e3:a1:42:6f:74:f4:5e:13:0a:5f:
a6:d0:f6:ff:53:6b:a1:fd:5a:59:8a:32:f8:b0:eb:51:b7:41:
12:c6:f1:cb:01:96:2b:96:21:07:49:63:be:d0:e2:a9:74:31:
64:75:97:24:ec:25:fa:67:6d:80:3a:69:b2:b7:15:db:8a:7e:
c7:98:11:46:72:93:f6:f1:0c:63:73:eb:9f:a8:54:21:f3:52:
99:5c:09:c8:42:dc:88:df:cb:97:75:a5:9e:63:88:ac:c6:84:
cb:33:02:27:d6:1c:28:ed:5e:39:6e:f7:12:9e:88:ff:1a:93:
17:26:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:39:56 2025 by rpki-client