Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/2c975bc5-7a03-3d35-b0e3-2526a589007b.roa
File: 2c975bc5-7a03-3d35-b0e3-2526a589007b.roa (raw, json)
Hash identifier: 9nTaJOHxMI5MQlpH08DO7wdhvCSST59/VZ3EJm3gd70=
Subject key identifier: 40:AA:48:9A:D4:CC:FF:9C:D2:CE:BB:55:C8:FE:A7:9A:EC:C6:07:52
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F432858484D758CFE39F8EBE7E7E87680
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/2c975bc5-7a03-3d35-b0e3-2526a589007b.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 36231
IP address blocks: 209.127.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:8c:fe:39:f8:eb:e7:e7:e8:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=aa042581-b607-44f7-a229-ffb04db9b08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:65:f3:89:00:9f:a6:fe:6d:ca:5c:a7:af:
21:88:c0:fa:3b:d8:c1:9e:d4:ba:74:05:b7:69:05:
a4:48:43:b9:c3:1f:c9:26:b7:f2:1d:34:1f:5e:4b:
31:64:10:18:0e:ac:85:d8:f5:a9:76:83:6d:01:2c:
56:81:d7:7c:9d:5b:b1:6e:9f:d7:55:5b:d7:b7:20:
e6:3f:06:2e:46:57:c5:0e:9d:48:a0:2f:70:c4:47:
f1:35:ad:27:42:69:af:88:63:a3:fe:44:f2:e4:f2:
66:01:11:37:d3:1b:05:6b:32:50:ac:69:ed:26:0b:
45:dc:55:41:28:04:8b:11:ae:e9:12:32:a3:bb:25:
83:97:85:77:7a:07:64:b2:dc:8a:9a:8f:5c:39:be:
35:cf:3b:4a:6e:41:56:00:e0:2f:ed:04:eb:b7:20:
ae:3f:de:0b:27:be:27:78:b2:9e:14:50:75:d1:79:
02:cf:33:34:0d:7c:49:74:20:b4:18:3b:ab:00:5e:
76:dd:b8:dd:e7:fc:02:eb:72:d6:28:00:e1:ea:7e:
d3:89:bd:87:7d:2d:8a:da:56:b3:ba:b8:83:9e:36:
2d:5f:92:0b:91:b8:2a:fc:57:73:4e:55:2a:2f:e4:
5a:f2:30:71:3c:72:a6:cc:1b:4b:30:18:b7:3d:da:
2d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AA:48:9A:D4:CC:FF:9C:D2:CE:BB:55:C8:FE:A7:9A:EC:C6:07:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/2c975bc5-7a03-3d35-b0e3-2526a589007b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
209.127.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:00:69:39:17:dd:ef:59:92:bf:35:8e:bd:51:e8:41:94:1a:
0d:44:75:10:38:57:e2:8b:ed:73:45:b1:5e:21:de:ca:f2:5f:
bd:d2:26:a0:05:a9:d3:ef:58:c0:34:dc:45:11:31:1c:6e:e9:
55:b8:11:e9:16:bd:6c:be:09:98:0c:00:14:e2:74:8d:82:dd:
13:ec:7e:c5:b6:a6:8b:43:37:6d:19:d6:3d:b9:4a:bd:15:91:
e5:b3:39:d3:e2:3f:18:3b:83:ef:2e:4f:1b:47:bb:ab:49:e8:
de:0c:23:84:3c:a5:5f:e7:fb:6e:63:9a:43:59:3d:2e:8b:17:
45:a6:4f:0c:03:7a:67:5c:51:29:b7:77:6a:6d:9f:d7:b2:f9:
37:e6:2d:96:40:58:c7:cb:f4:58:ef:b0:05:9e:07:c5:4d:b2:
35:e0:fc:3a:45:63:9d:48:ed:a3:37:0e:8b:b3:32:86:f9:ef:
06:85:17:a1:29:5c:4a:c8:2c:5a:30:17:71:24:ea:ce:63:2f:
a5:57:4a:96:e9:d8:11:97:00:4e:62:e1:24:ff:cf:b2:56:49:
17:a6:d9:b5:04:71:1a:d8:73:d4:91:74:11:86:e8:65:ac:7f:
a8:39:f8:e0:3e:28:cb:e3:98:4c:34:9a:12:47:b4:8c:42:47:
ec:77:99:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:34 2025 by rpki-client