Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa
File: d34bfd9d-57a4-3452-aad3-b812c11a1320.roa (raw, json)
Hash identifier: 44B5pWVaF2YHcx8wBoyZEVi/hKomN0JtmkB8oVfeYkw=
Subject key identifier: 9E:24:39:04:BC:E6:3B:D5:0D:D9:6E:05:67:C5:1A:BC:B5:4F:42:ED
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482EC0150E98601D9A148230C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 7342
IP address blocks: 209.131.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:15:0e:98:60:1d:9a:14:82:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=791cf186-9d1b-48d9-a27a-99c03dea4aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c9:75:6c:99:cc:87:83:89:a0:5a:2b:d4:da:
db:68:b7:95:6b:19:b4:a5:d5:4a:f7:c6:ea:5a:8c:
e8:18:fb:c8:02:ce:8d:5b:08:3a:bd:60:8f:c4:3b:
51:96:21:e0:d4:0e:95:18:1d:5d:fb:6e:17:eb:ec:
f3:9f:e0:ba:fb:1c:41:d3:30:d3:03:9b:f5:c7:99:
18:6c:3c:7f:a5:5a:57:a5:f1:08:94:04:90:da:15:
18:a6:3e:35:43:ce:ff:43:22:c0:23:7d:51:34:a1:
40:5c:4c:40:f8:13:1f:6d:45:c7:90:89:90:b6:78:
5d:5d:f2:99:d1:c4:59:4c:8b:9b:cd:4c:da:f2:a2:
f1:01:2f:27:14:93:3d:ee:1b:2d:dd:52:f9:3b:85:
2f:fb:9b:4a:a3:fb:c6:58:03:c8:26:65:fd:cd:db:
89:48:f4:26:19:ef:fc:74:58:83:b4:77:d9:7b:8d:
af:51:2e:cb:b8:03:12:4f:a1:a0:a9:b5:1a:eb:39:
45:52:66:2f:29:1a:3d:5a:d4:91:ec:2c:dc:a8:5c:
99:a5:52:85:04:9a:19:2d:44:c5:5e:88:c1:07:e4:
91:02:f5:3c:b3:63:1a:62:19:5f:c5:40:29:ab:1b:
0c:87:c5:96:3e:1d:95:f1:0f:7f:70:fe:46:40:62:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:24:39:04:BC:E6:3B:D5:0D:D9:6E:05:67:C5:1A:BC:B5:4F:42:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:d2:ab:63:f0:1d:3c:53:41:ab:69:8f:10:98:34:28:e2:27:
69:e3:8f:cf:56:10:f6:8b:a4:04:cf:12:29:89:aa:ef:15:67:
2e:41:7f:4d:de:95:c1:25:48:06:58:fb:d3:5d:b0:f8:d1:02:
f1:ec:1d:5f:81:cd:c0:05:57:29:44:3a:93:cc:67:21:7a:c8:
c6:4e:35:de:64:00:dd:ef:56:71:27:dd:7b:aa:6e:8a:42:67:
da:6b:2c:99:14:13:41:f5:02:02:f6:dc:35:5b:f4:4c:d8:84:
9b:24:f0:8b:e2:21:ba:e8:ee:02:c7:76:4d:0b:00:d4:62:43:
4f:42:b3:62:fe:3c:fc:78:3e:9f:9e:c6:dc:50:5a:d8:dd:b2:
74:bb:9e:74:45:28:b8:e9:a2:67:6a:88:38:a8:07:95:0c:d9:
7e:f9:70:c0:96:b7:c2:83:92:31:ab:5c:7d:c0:ce:15:4c:24:
1d:67:f1:67:cd:c7:3a:9d:1e:bc:3b:24:c2:86:3b:5e:db:ae:
03:14:ff:ae:94:0d:fd:30:87:9a:1f:ba:7e:53:c1:21:3b:d0:
e9:47:cf:2c:6b:02:3a:26:02:cd:d2:77:0c:23:39:3b:59:a9:
ae:ec:3a:b4:e5:23:4b:b4:e8:81:0c:9c:5b:a9:53:e4:5f:ee:
98:74:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:14:39 2025 by rpki-client