Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d51be783-dcbb-3d6d-b91f-56b1ad303d21.roa
File: d51be783-dcbb-3d6d-b91f-56b1ad303d21.roa (raw, json)
Hash identifier: hboJamjALOG1bmOIxax3e4vcMHby6oyYfMVSb2RjTVA=
Subject key identifier: F6:1D:C1:87:77:D4:54:D4:BA:B6:4E:A1:B8:4D:22:75:C4:49:5B:BE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485B6B0AB0181DC943652DF280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d51be783-dcbb-3d6d-b91f-56b1ad303d21.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 209.131.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:0a:b0:18:1d:c9:43:65:2d:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=3b8064c5-36d1-4adf-8ca9-a2484cf354e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3c:78:37:f1:c9:91:f7:6e:0b:2f:e8:cf:af:
8a:f4:8a:95:ee:35:0c:cf:ad:58:0f:9d:94:50:2e:
e7:bf:23:f2:a5:be:25:71:e5:f4:cc:34:83:e3:dd:
a4:b1:c1:58:d7:77:e1:67:74:f8:3a:a8:91:92:26:
54:d8:d4:1d:bf:e1:84:55:bf:56:72:67:fe:2d:05:
fb:93:9f:e8:81:01:66:cc:05:11:eb:33:92:47:40:
35:47:d8:65:08:f7:3f:be:41:60:ba:50:7a:84:ed:
2a:80:b3:c0:f1:91:59:c3:93:57:08:93:4d:6c:c8:
c9:39:86:90:ae:53:dd:e1:29:eb:4d:01:25:34:c4:
c5:15:29:97:73:4c:a8:2d:09:6f:6c:65:2a:6f:7d:
5d:63:23:61:5a:88:cc:54:40:78:6f:29:98:d0:4a:
6c:83:c9:b8:46:dc:4f:f9:44:e1:7e:ab:46:2c:8f:
78:ef:43:a4:64:c1:81:0e:ea:d0:89:58:06:69:73:
b1:21:3f:8f:b1:a1:44:63:18:0c:45:e9:e3:bd:9a:
a1:f3:1d:ba:6a:3e:db:27:0a:a2:ad:e8:a4:27:b4:
c9:d2:5d:08:39:9c:49:06:8d:72:b9:25:0c:83:e4:
63:50:d5:01:66:41:8a:d4:8d:71:31:48:f2:57:88:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1D:C1:87:77:D4:54:D4:BA:B6:4E:A1:B8:4D:22:75:C4:49:5B:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d51be783-dcbb-3d6d-b91f-56b1ad303d21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:ab:e5:0c:0a:a7:c5:b7:25:65:b3:4c:56:83:35:5b:2d:cd:
b7:52:e6:5b:ec:3a:34:25:c0:4a:d4:39:13:86:1d:b0:32:bc:
1d:2b:0b:4c:70:f4:cc:e1:38:88:f3:08:f3:36:e9:cb:96:40:
da:f4:d0:e1:4f:26:8f:39:30:37:59:22:14:b9:4a:6e:bc:d9:
5f:a5:5f:2a:be:4a:70:fe:14:95:b9:4c:08:ce:6a:32:ca:3a:
2e:73:88:e2:c0:2b:d7:bd:76:6d:0f:dd:4d:ef:dc:02:3e:10:
01:7b:35:cf:50:f6:0c:11:b7:41:15:e5:3a:55:81:79:4e:25:
9d:0a:28:34:28:e4:df:c3:67:40:9b:d1:95:ac:01:58:0a:ea:
13:20:88:4b:54:e9:2b:36:37:d0:9c:f2:80:f3:04:ec:3f:07:
a1:68:ed:a0:ce:6e:76:70:44:21:75:42:3c:10:19:d6:ad:a5:
b3:17:30:ff:65:cc:d8:09:88:ab:5d:5e:67:40:e7:59:cd:a4:
b3:d8:1f:15:55:00:80:b3:66:3a:db:be:51:73:34:2f:45:b5:
aa:b5:bb:ea:e6:aa:23:b6:a8:d1:42:16:dc:b0:5e:ae:3e:16:
ab:a4:49:05:e2:bc:f5:9f:57:6f:ac:c0:6e:02:82:f1:87:4b:
9b:0c:a4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:19:49 2025 by rpki-client