Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/3b03f0cc-1829-3c8b-9574-9db3799988c7.roa
File: 3b03f0cc-1829-3c8b-9574-9db3799988c7.roa (raw, json)
Hash identifier: zGukyzgRkG8LOpKsB1qKmrS5HX4pq8VwFKPk24eyB88=
Subject key identifier: 90:14:53:68:70:B9:D3:E3:7D:F9:1C:22:A7:B1:AC:43:92:CA:F5:EE
Certificate issuer: /CN=f37ae11d-629c-4443-bc37-2c3eebd09453
Certificate serial: 010D0C9F432858483B500C7108024BCE13239800
Authority key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/3b03f0cc-1829-3c8b-9574-9db3799988c7.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 394708
IP address blocks: 209.143.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:0c:71:08:02:4b:ce:13:23:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f37ae11d-629c-4443-bc37-2c3eebd09453
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=1e33ede5-8f1b-4ae8-b0fa-0d43b6b79e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:e4:18:d2:74:ec:a1:62:4b:23:82:fd:44:
b9:df:99:33:26:24:e0:d3:94:0b:7d:62:4e:2a:e1:
89:72:a9:d0:d4:39:0a:53:65:e2:83:15:15:13:d3:
fc:a9:14:fb:df:61:72:9e:b6:27:62:fe:d9:3f:b6:
b0:aa:08:9c:70:ee:a9:29:57:3e:d7:98:18:17:81:
38:a8:e0:2a:f1:21:9b:27:c4:d8:b3:d3:76:bd:c3:
5a:c0:3a:d5:94:cf:a8:38:48:9c:ad:b7:b5:88:84:
ab:98:2b:49:d4:3e:2e:e9:0f:90:ea:bf:84:c6:ce:
f8:05:ef:f7:70:1d:34:d5:88:f4:80:59:54:25:7e:
8f:6b:d3:49:6e:e0:f8:7a:74:0b:f2:ac:da:9f:cb:
7e:5b:38:29:5c:13:41:fc:3c:d7:6f:a0:4b:fc:79:
a2:2c:83:11:c7:30:f3:cf:de:31:5a:cc:9c:78:90:
26:c3:f5:51:ee:31:57:17:8c:2d:d9:29:85:75:20:
90:5b:0a:f3:16:03:af:21:36:cd:ba:e1:77:4f:2f:
1d:38:e4:79:4d:b6:c9:26:32:d7:89:f8:0d:f8:a9:
07:2d:f6:31:87:24:30:70:8f:c2:19:e3:20:3d:66:
2e:ca:e0:62:53:dc:d2:72:a2:a0:4c:78:20:f8:c1:
be:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:14:53:68:70:B9:D3:E3:7D:F9:1C:22:A7:B1:AC:43:92:CA:F5:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/3b03f0cc-1829-3c8b-9574-9db3799988c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl
X509v3 Authority Key Identifier:
keyid:57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
sbgp-ipAddrBlock: critical
IPv4:
209.143.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:a4:d6:4c:43:31:da:a9:4e:4e:18:d1:72:79:97:9b:43:de:
4c:6f:89:82:32:8c:8d:6f:26:93:46:03:63:7d:f7:d4:4b:28:
32:e7:5e:01:ab:9d:fe:35:9f:2a:a7:8d:21:f3:6b:c5:fd:6e:
59:35:b5:03:64:00:d6:5e:48:94:6d:dd:63:fe:3f:5f:0e:2b:
bd:da:b2:e7:6e:7e:cb:14:3d:10:47:6d:4b:be:d7:94:00:a3:
17:56:7b:cf:b0:23:9c:7a:ac:33:0f:dc:2c:4c:95:fe:3b:26:
af:b0:4f:1f:90:7d:0a:eb:e7:63:b5:b4:e8:a4:ef:87:ea:4c:
cf:48:4e:d9:68:ca:68:f1:08:c4:91:30:f8:60:32:07:cc:00:
84:15:4e:7b:94:3e:c8:04:66:1f:ce:fa:e0:0a:27:67:22:a2:
14:ce:c5:38:b0:23:e5:a9:24:df:2f:1f:eb:af:85:62:cf:a3:
9a:ce:02:d2:ec:05:4a:91:0e:51:af:8c:c3:7d:0d:a7:48:87:
0b:d4:61:cb:30:f2:62:26:c1:49:6f:c2:1e:53:b3:e0:0d:a3:
20:48:0a:eb:80:02:3e:fd:4e:66:c9:c6:88:40:fb:3a:d8:05:
04:fe:5c:0c:7c:76:ff:c7:d3:83:03:fe:ba:66:b8:95:df:7b:
97:8e:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:53 2025 by rpki-client