Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd667c79-e188-38ad-b2af-1043a1736919.roa
File: cd667c79-e188-38ad-b2af-1043a1736919.roa (raw, json)
Hash identifier: k+KXyeujcbWu1JQN/Lok+5dmmGqSD7JNjk9BT0HEyD4=
Subject key identifier: 4B:58:34:59:86:32:6A:10:5A:3D:49:A0:EB:A3:7B:57:18:3D:91:83
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584847E0300B8F0F9305B9CAE2E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd667c79-e188-38ad-b2af-1043a1736919.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 209.131.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:30:0b:8f:0f:93:05:b9:ca:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=22933e42-fcac-4e6b-9057-6cd6017cde38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:19:ec:ac:76:cf:26:5d:00:6b:0e:6e:0a:
50:91:a6:1f:32:57:0a:8f:b6:7a:f4:88:4a:6e:95:
7f:ba:00:a8:3b:a1:9f:6e:26:5a:33:ad:31:90:90:
5d:9e:72:1f:0d:2d:e7:42:58:c0:17:8e:02:1c:ea:
df:b1:37:46:d6:71:ef:87:b1:06:37:28:57:ba:36:
66:81:40:aa:52:6a:12:00:66:7a:e8:16:77:e7:50:
c2:e4:07:98:5d:3c:fe:6c:d8:71:c5:26:c4:a0:55:
2e:ff:1a:1b:49:f6:48:2f:ee:a0:45:ec:d0:eb:ef:
0f:84:88:c2:67:17:49:4c:83:56:f4:5b:55:a1:81:
1b:c5:30:08:63:21:85:d1:a6:79:ea:ab:13:5d:71:
91:14:ad:b1:cb:3f:31:84:1e:a1:6a:82:fb:2f:1c:
bf:fa:a9:12:3c:75:ef:94:82:d5:ec:d2:66:56:89:
79:96:0d:e7:8a:ed:58:f1:5c:13:86:de:b3:2a:b9:
4f:f8:65:4d:28:d1:b3:fa:f3:6d:f5:19:68:17:47:
5b:2d:51:fc:70:44:a4:80:a2:15:4e:bf:4b:95:73:
7b:a3:e0:24:ce:9e:7a:71:b8:d4:0b:d5:f4:1c:56:
97:e0:7e:19:e6:de:8a:15:e7:54:dd:01:1f:9b:14:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:58:34:59:86:32:6A:10:5A:3D:49:A0:EB:A3:7B:57:18:3D:91:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd667c79-e188-38ad-b2af-1043a1736919.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:d1:ae:f6:73:b1:b4:bb:0d:71:d3:e6:5d:79:a1:68:4a:04:
ad:ea:c9:28:ca:e9:94:56:e4:23:64:6f:b4:e4:e6:91:7b:05:
cc:39:f8:98:d3:63:61:c2:95:7a:ab:7a:fd:19:27:1b:2e:7b:
7f:a8:39:33:04:78:16:76:02:47:b1:f5:fe:c0:a1:ef:df:d0:
21:b4:c9:0d:40:1a:fd:e6:36:6d:f7:7a:57:60:50:1d:92:80:
1b:5e:da:a6:43:30:40:bb:3b:8b:54:0a:9a:6f:6c:7e:5c:b0:
10:0f:18:9d:cd:98:a3:6e:9e:c8:dd:0b:0d:0c:76:fe:79:2d:
e4:46:45:07:ee:f8:aa:97:96:5b:ff:97:9c:3f:28:33:28:0a:
b8:54:37:3c:0d:93:c0:2e:18:6a:f2:cc:11:a5:0f:2c:57:6f:
ef:20:0b:25:e7:b2:78:14:c2:c8:db:93:c6:6a:ed:3b:c3:42:
cc:6f:90:c2:bd:43:98:b7:98:cd:66:9d:62:0b:18:75:07:f9:
e6:96:85:ef:cb:62:81:71:7a:00:f8:ff:e8:0d:47:6d:ce:d7:
8f:91:85:3d:aa:72:12:d6:c7:3f:ff:2c:ae:c8:2a:8f:cd:f5:
53:8c:f2:84:dc:74:df:3f:5d:1e:0c:b4:79:35:2b:50:2c:fb:
04:c4:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:34 2025 by rpki-client