Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa
File: 85b99b16-3c92-33b6-9ed8-133467e30af3.roa (raw, json)
Hash identifier: /eAqucAS82bEwQMR0y9HNJXyryNc4EllK9rlY0iEKr8=
Subject key identifier: 01:E7:F6:6F:59:7A:BF:D5:11:D0:F3:50:1B:C4:20:DE:A6:A0:91:E0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480EA52129D7E33DAF027BE7E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 7342
IP address blocks: 209.131.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:21:29:d7:e3:3d:af:02:7b:e7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=45f098b7-0089-425d-a430-348168a63234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:27:7e:08:8b:56:73:0a:94:ca:b1:f9:a0:
32:e8:9c:5c:98:0e:a1:5c:44:42:51:cf:15:b9:6b:
bf:09:4a:aa:cb:62:1b:1d:e7:55:64:b0:38:04:b2:
37:2b:90:00:8c:83:46:e0:2b:6a:91:b5:34:04:09:
83:f3:1e:7c:f6:21:11:ba:43:f5:4c:e9:cf:68:8d:
3d:65:1c:1b:c7:4e:8d:88:9a:af:64:6e:91:ba:7a:
f2:ea:26:d4:1b:24:73:34:3f:4a:9f:75:2d:58:32:
ac:31:15:3c:31:61:ed:a1:00:00:e6:7c:c1:14:b2:
10:56:fd:6d:98:18:4c:6a:af:ef:14:58:9f:a9:a0:
fd:6c:d3:3b:76:46:8e:7a:89:46:8e:56:d4:03:60:
bd:33:4d:89:6d:d5:a5:0a:c8:21:80:51:b5:6b:e4:
d6:39:8a:8e:b3:f9:c5:78:56:7b:3e:82:a8:16:0d:
e1:42:29:f0:2a:70:8d:0a:c9:de:c7:82:31:59:6c:
b0:db:c3:c6:00:b1:30:32:8d:f1:e5:c6:ba:13:eb:
37:cf:a2:fa:b5:83:60:6a:ff:d1:39:27:b6:05:d8:
3a:13:46:76:8f:04:c5:fa:05:e9:97:70:ae:7d:d3:
f9:ab:70:e2:12:cb:64:63:71:5d:80:02:b6:a8:f8:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E7:F6:6F:59:7A:BF:D5:11:D0:F3:50:1B:C4:20:DE:A6:A0:91:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:b4:3c:b8:d3:4e:ef:c9:76:5f:d0:3e:76:39:72:58:66:71:
93:aa:70:c3:e8:77:7e:5f:54:eb:03:14:3e:76:56:7c:81:52:
da:31:55:bf:d9:a8:68:cb:a3:5d:20:57:e8:70:e8:00:69:ce:
2b:fe:94:77:3c:de:cb:22:89:f3:ed:50:3a:97:f3:d3:6b:85:
3e:98:6a:ae:f1:3e:39:57:fa:27:db:b7:e4:75:e1:c7:58:de:
68:71:6b:bc:c0:62:9f:4e:9a:e8:c6:07:65:05:3a:d7:5c:4c:
d5:e2:0d:13:8e:c3:bb:b4:b2:b5:30:49:0f:d0:1e:6c:73:dc:
9f:43:fd:1a:72:34:a6:34:12:5c:6d:a8:28:35:a7:9a:c5:61:
4b:e8:73:9d:c1:06:18:85:50:85:80:ac:2b:2f:1b:4b:bd:64:
1d:1d:c2:77:43:10:5f:f2:08:97:ac:ce:db:35:50:5c:8f:45:
21:19:c2:fe:6d:0c:c3:f7:a3:71:c2:b7:e8:a7:ef:4e:bc:7a:
22:4b:ed:83:33:1d:1f:66:13:ed:c1:2f:87:2d:2c:8c:57:4c:
8a:6b:28:15:23:e0:0b:34:e1:6a:8b:64:6f:11:45:ec:d3:da:
6e:f8:a8:64:d0:ed:e4:ed:a6:45:af:44:b6:69:fe:56:3c:ee:
2b:b0:0c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:37:20 2025 by rpki-client