Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/63cf59ca-8df9-39b2-9ce2-55ba87cc92e1.roa
File: 63cf59ca-8df9-39b2-9ce2-55ba87cc92e1.roa (raw, json)
Hash identifier: CMxP+AMN+bSl20CfSHKUUmMjkexyOWOU8fhPacv1evg=
Subject key identifier: 30:3D:2D:CA:36:C4:54:89:CE:EE:A5:CD:D3:B7:CD:07:6B:28:D8:F7
Certificate issuer: /CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Certificate serial: 010D0C9F4328584867FAE9F1C817A4445C5B5680
Authority key identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/63cf59ca-8df9-39b2-9ce2-55ba87cc92e1.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 7922
IP address blocks: 209.135.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:e9:f1:c8:17:a4:44:5c:5b:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=ba64f34a-9a1a-48f1-af67-aa6dc256447c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dd:71:db:59:76:69:68:a4:cf:39:1f:ba:73:
a8:6d:d8:14:9c:ed:7b:bb:bd:12:eb:e8:cc:ed:1f:
76:26:58:5b:57:b5:9c:98:7c:52:e9:12:b4:84:e3:
db:39:e4:fb:77:a3:aa:27:11:aa:17:58:73:6b:46:
7c:d6:b7:45:95:b3:e4:06:7b:58:2e:26:a6:86:1f:
bd:b8:e4:ff:f0:42:7e:c2:0b:ae:e5:70:54:e1:5e:
34:ec:80:71:f7:56:06:2d:44:92:70:62:61:7a:aa:
c6:c9:ac:8d:13:ff:65:5e:9e:ea:93:af:b4:5c:71:
ac:3c:d6:48:f4:b4:29:de:31:8f:2c:4b:95:42:56:
3c:1d:e1:13:ae:4a:b6:03:99:f4:7b:52:a8:64:d5:
8e:82:ac:e3:17:d0:19:8f:40:23:a1:3d:a5:5b:3d:
d5:b9:82:d4:1b:11:da:28:63:88:45:04:4f:ee:72:
50:74:61:dd:db:ee:d8:5c:27:6d:20:8f:33:77:26:
71:ee:bc:7c:ff:4b:a8:4f:b8:84:26:4e:49:8c:f0:
43:31:d5:c3:f7:cf:15:7d:f3:69:57:d4:65:a2:01:
ae:19:4a:1b:ac:80:f7:b5:27:53:24:bb:20:f3:95:
1e:92:3e:d6:8e:67:ff:0d:fe:ca:c8:61:e8:d7:18:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3D:2D:CA:36:C4:54:89:CE:EE:A5:CD:D3:B7:CD:07:6B:28:D8:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/63cf59ca-8df9-39b2-9ce2-55ba87cc92e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl
X509v3 Authority Key Identifier:
keyid:B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
sbgp-ipAddrBlock: critical
IPv4:
209.135.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:a7:5f:6d:17:ad:90:13:78:af:ad:7e:f2:32:93:70:ac:ed:
f2:4e:e4:84:28:20:97:a5:0b:33:a9:08:ba:ab:7b:f6:b8:db:
4a:06:fc:b7:28:16:ec:e6:84:8f:cd:d0:2c:1c:fc:4c:f9:79:
ae:64:87:fc:df:e7:75:33:26:97:50:f2:de:5a:d6:f5:73:99:
54:33:14:62:e1:31:a4:d5:db:db:aa:0d:fa:72:ce:00:b0:3e:
d6:10:0d:c6:3a:9c:25:e0:cb:42:f0:13:67:5b:ce:a2:78:6c:
d0:7f:63:c4:0e:66:52:7f:d2:5c:6a:c2:e3:91:a1:81:66:20:
0f:3b:22:a8:10:62:11:6f:d2:b8:1f:b0:6d:50:5a:a9:c5:cd:
37:f8:17:6d:d6:99:86:89:79:11:7a:dd:ad:93:7d:98:2a:ea:
24:60:3e:6c:fe:aa:45:fe:d1:1f:34:96:6c:cb:1c:3d:8d:fe:
58:a5:1a:dc:21:01:42:e8:b4:1c:ee:19:69:76:e5:29:4c:be:
29:d7:ad:13:5f:3b:ca:0e:ba:cd:79:0d:f6:de:5d:e8:09:b1:
e8:ba:06:a8:a0:00:df:56:4c:0e:08:c6:74:4e:46:77:50:16:
16:8b:1b:fa:fe:6d:96:ae:58:62:76:5a:3e:a0:bd:87:63:66:
0f:f3:e3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:18:30 2025 by rpki-client