Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa
File: 509971a2-2e61-329b-aabd-5f74f8132974.roa (raw, json)
Hash identifier: mrnw5SlKWZxLUJyYXVMZb3aALXi6fkrChehO0r2AlWg=
Subject key identifier: 0B:97:85:79:1C:F8:D2:DB:56:77:9B:09:0F:D6:0C:08:7A:74:44:66
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584855D5BA2D2CB96FECBE3F4E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 209.131.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:ba:2d:2c:b9:6f:ec:be:3f:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=5c336365-4b9d-422e-95af-5a052d82ae86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:00:52:99:28:a2:b6:09:a6:86:c3:c9:05:
29:b8:0a:a8:d8:50:b3:9b:74:b6:ce:86:e1:94:5d:
f1:be:0e:5b:cf:eb:3b:81:fd:2f:05:15:c3:70:9c:
14:66:16:66:4e:92:cc:53:46:f1:60:6b:e0:d9:7b:
4f:bd:92:29:63:46:d0:cf:e3:e3:ac:22:a0:6f:8a:
2f:93:77:65:ce:bc:0a:98:e0:61:ca:a7:5d:9b:22:
29:e5:ba:db:61:14:26:ef:ab:8a:c8:c8:13:de:bd:
16:28:8f:2f:74:d4:77:7b:34:dc:bb:2f:4e:aa:30:
da:b1:26:b7:62:f1:b5:72:a2:eb:af:a7:70:88:0c:
b8:94:1b:c6:12:e6:52:1d:42:ef:e2:7e:8b:fe:0f:
47:b5:56:92:00:22:dc:10:3d:61:89:f7:e6:96:91:
99:05:1f:7c:a9:29:a3:8d:1c:c0:31:45:16:72:d2:
89:73:2f:dd:99:91:65:d7:5c:e9:b0:76:a0:ec:32:
dd:b3:c6:13:c4:03:f9:c6:9e:6f:0f:98:48:95:b7:
45:1e:8b:6f:9e:48:e6:00:14:f1:0b:c2:0f:79:4e:
2d:f3:b4:19:f0:d8:a5:88:6c:24:f7:8e:22:5d:52:
eb:51:9a:a8:aa:8a:2c:8a:c1:be:75:0b:db:d1:93:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:97:85:79:1C:F8:D2:DB:56:77:9B:09:0F:D6:0C:08:7A:74:44:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:87:c8:54:4c:66:2d:6d:b5:35:2e:58:b0:e6:59:d8:58:41:
9c:c3:63:9d:da:a0:d3:ec:de:94:46:6b:a2:93:4c:bd:b6:d6:
26:9c:92:d1:b1:a3:51:e2:31:59:c1:d1:9e:df:ef:84:3a:32:
d8:ad:18:46:1b:8d:da:d6:f7:96:e0:52:6a:ca:d1:a0:16:c7:
20:63:0f:e9:64:9d:8c:4d:bb:dc:87:02:0a:91:fe:56:64:7c:
29:bf:26:8d:72:b6:ea:0e:e0:6f:73:5e:9b:b3:68:4b:12:ef:
3f:77:93:90:20:cb:d3:19:1e:a3:cf:a5:5e:86:30:79:fb:47:
d5:67:01:a8:96:81:3a:b7:44:04:d9:4d:23:15:7b:1b:02:bd:
1e:3f:b0:3e:db:3d:a2:c0:e8:51:33:a9:71:bf:43:05:dc:91:
c6:45:96:1b:fe:d4:b4:4c:82:19:03:42:88:1a:d5:3d:f9:7e:
e4:f8:fc:4d:b3:97:e3:28:1a:4a:64:db:a0:4a:c6:a4:37:8d:
db:6f:bc:5e:46:a4:86:49:e3:50:79:8a:1c:f1:64:06:93:9d:
ab:c6:b5:e7:5f:50:66:90:67:d3:50:02:a4:dd:b1:5d:ab:36:
7d:5e:07:91:2a:4f:45:60:f0:03:16:98:8d:7e:cc:80:dd:cb:
80:4d:d1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:35:16 2025 by rpki-client