Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
File: 09591a19-c6e3-3973-9499-51ef6efc847d.roa (raw, json)
Hash identifier: N0mbiuWAMYI3OdXXTsDvo0AKQ12Opml+W94sG6l4s38=
Subject key identifier: 94:F4:37:23:F5:35:1E:B7:80:A3:19:6A:69:84:0E:B3:61:1B:DD:D3
Certificate issuer: /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Certificate serial: 010D0C9F43285848159FF0EC461124831BB44F80
Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 0
IP address blocks: 206.41.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f0:ec:46:11:24:83:1b:b4:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=aec20693-685c-4fa2-92aa-4a59c25ebb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:e0:de:c4:1e:d5:47:7a:03:73:95:87:c1:
08:4c:67:9c:ce:67:32:95:c3:e1:45:85:20:57:ef:
ff:66:f2:e5:fb:28:ba:5e:4d:3c:42:24:89:6d:4b:
eb:a7:ba:28:97:df:5c:25:a7:f4:10:cd:2e:a3:a1:
20:72:ef:a7:c7:8f:0e:a3:45:9f:d4:17:7a:3a:0b:
38:99:42:24:44:aa:5d:57:73:5c:b4:77:26:10:81:
c6:df:58:39:db:63:aa:be:51:d0:06:d4:8a:83:06:
46:9e:80:07:bc:86:f3:bc:12:7d:4a:81:fb:8a:fe:
80:f1:b6:50:c4:bb:71:57:8c:8c:83:06:71:12:d9:
18:aa:89:4b:d6:d1:d6:eb:8d:fe:5f:d8:27:5c:ab:
8f:f9:58:7e:c6:4f:35:7d:6c:94:62:c0:56:82:ab:
63:27:e5:89:9e:92:f3:ea:51:07:a0:43:92:73:5d:
17:41:84:a0:db:c9:bf:dc:97:c7:9e:eb:c3:58:6c:
9d:2f:4d:03:35:73:40:4e:3e:ee:6d:28:2b:d7:fd:
0d:5c:03:09:fc:47:f0:7e:2b:f4:da:76:66:83:40:
a7:82:41:1a:d1:87:19:fd:e5:4d:c7:6b:63:f7:f5:
01:2c:27:a3:7e:e1:3f:c7:07:0a:50:89:36:ad:ca:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F4:37:23:F5:35:1E:B7:80:A3:19:6A:69:84:0E:B3:61:1B:DD:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/09591a19-c6e3-3973-9499-51ef6efc847d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl
X509v3 Authority Key Identifier:
keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:1a:e0:35:1f:f4:d4:a0:38:9d:d7:a8:37:55:42:8f:45:60:
f3:5f:db:ec:0c:dc:10:79:96:99:77:76:13:1f:00:d8:31:d0:
6c:82:49:99:57:ee:8f:06:f3:ce:b5:06:5a:e5:10:08:1f:79:
c1:2a:18:37:8d:8f:de:c2:db:45:29:db:09:01:c3:d1:76:40:
6b:53:49:b5:8a:64:97:2d:6c:2d:5d:59:24:8a:05:30:db:c0:
64:92:15:1d:78:bd:bc:5b:ef:9a:c1:9f:d1:7e:48:5e:3c:7b:
89:55:15:57:d0:fc:42:c6:20:b7:28:f7:f2:95:76:be:7c:24:
a8:70:8e:49:04:df:26:e6:cc:63:cd:8c:68:09:cd:d7:1e:70:
4a:15:10:de:25:2e:23:5c:d7:b2:d1:a7:f9:a7:9e:09:fb:27:
c1:6e:2d:ce:68:a8:4e:51:24:39:3a:ab:ac:10:e8:e5:eb:94:
76:62:97:32:13:2e:b2:c0:69:59:28:43:60:28:e8:26:9b:cc:
2d:ab:ab:a3:f8:3a:99:43:5d:65:44:bb:a9:98:49:b2:ae:ce:
69:1b:90:18:d3:b3:a1:be:e0:f0:1e:25:aa:66:bf:5d:6a:0b:
c0:af:e2:e4:3d:d3:d3:70:ba:85:89:6f:cc:fe:8f:0e:c6:48:
2a:82:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:57 2025 by rpki-client