Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/c1d6ae56-3efa-39fa-afc4-089897153b24.roa
File: c1d6ae56-3efa-39fa-afc4-089897153b24.roa (raw, json)
Hash identifier: SP3T2KRz+rb3+4UwAvFMjjkDZtB+tcgHufT5nipxJdo=
Subject key identifier: 15:86:97:9B:5F:8F:23:A1:4C:3A:41:A3:93:8C:43:C1:01:69:3D:F8
Certificate issuer: /CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Certificate serial: 010D0C9F4328584867FAE9B2E2058181255FBD80
Authority key identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/c1d6ae56-3efa-39fa-afc4-089897153b24.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 7018
IP address blocks: 209.135.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:e9:b2:e2:05:81:81:25:5f:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=3b710b92-7d5c-4dd8-b811-a004d676213e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:12:bf:9b:82:eb:c0:5b:3e:45:a4:45:87:
58:94:72:d0:0d:ae:a4:d1:32:ab:ff:de:bd:31:ea:
de:30:ab:65:8f:fa:2d:91:29:c2:0c:47:d7:1a:83:
a5:03:d4:21:f9:46:58:83:d4:19:43:f8:ce:08:c7:
c8:7a:6c:e9:71:ec:0b:52:78:7d:87:31:b1:a1:4d:
93:2b:9d:7f:1a:34:ce:c7:08:14:53:09:c2:4c:d3:
94:2a:1e:84:87:29:1e:a1:6f:e9:94:01:09:64:51:
9d:dc:0c:75:04:70:f0:a1:ca:e3:05:30:db:57:0a:
2a:5f:ff:af:39:e0:63:59:26:85:14:b4:7b:1e:9b:
06:b0:bb:54:df:6c:02:e7:ff:5f:cd:0e:93:de:fc:
ba:88:76:ec:4f:64:1c:77:d0:4c:70:4b:81:26:56:
6b:01:bf:74:55:00:cb:a8:39:79:96:e5:70:b1:88:
ae:6b:50:04:16:eb:f3:0f:f1:f8:68:48:c7:68:6c:
55:03:27:d3:e4:33:0b:75:d2:35:73:d4:4d:8e:eb:
fb:4a:03:a6:d0:08:d0:97:c3:1d:18:f6:19:76:ec:
55:cd:29:2b:4c:8b:a4:59:73:97:d7:49:e3:42:cf:
94:bd:67:8a:30:be:60:90:ca:db:87:d4:a4:b3:a9:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:86:97:9B:5F:8F:23:A1:4C:3A:41:A3:93:8C:43:C1:01:69:3D:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/c1d6ae56-3efa-39fa-afc4-089897153b24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl
X509v3 Authority Key Identifier:
keyid:B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
sbgp-ipAddrBlock: critical
IPv4:
209.135.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:60:35:77:ff:08:88:0a:d9:ae:8e:0e:ae:a5:c2:30:39:92:
f1:ae:4f:26:1c:16:d2:5b:99:e5:fd:ef:43:ac:7e:51:1c:49:
12:f0:b8:00:df:13:1c:67:c2:4c:de:a4:7b:d5:5c:c5:05:3d:
21:56:e2:fb:0d:82:c0:df:fe:ce:cd:a7:1d:57:ce:12:72:8c:
b4:ce:6b:d3:7e:2f:f9:55:99:fd:83:d6:49:b6:84:c5:9c:6b:
35:44:57:dd:54:bc:81:50:0b:6b:25:34:9c:c0:c5:8c:c2:ea:
50:b6:99:99:54:bb:6b:90:73:71:4b:63:60:a4:3a:73:16:aa:
e9:4e:86:b7:5e:8e:63:d1:f6:65:7a:48:10:39:03:70:ae:ac:
fd:e5:04:46:26:1f:3f:91:2e:95:91:d5:ca:04:a0:f5:4f:01:
02:01:2f:ff:62:c8:9c:58:59:1c:6a:c6:44:c4:70:cf:14:5e:
33:3b:8a:a6:50:e7:6b:98:65:e4:12:13:bf:1e:22:c5:5d:8f:
3c:2b:f1:11:63:4b:81:31:28:cb:1b:da:e0:b5:a4:dd:0f:d6:
14:06:28:2e:ea:17:57:1a:d8:3a:5b:da:a7:5b:0d:ec:c8:b6:
5f:81:6e:80:a9:36:6a:47:14:c9:f5:78:e0:ab:d3:32:6e:7f:
0c:41:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:12:59 2025 by rpki-client