Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa
File: 6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa (raw, json)
Hash identifier: DPXOeL9JWHA6sCruqZ7c1fTGTY9r++t1WAs7dhglkNU=
Subject key identifier: 1A:9B:46:1B:75:79:BE:88:96:47:F1:74:7F:5E:8C:F2:23:D0:7F:A8
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F432858484C1024F86FF101EE8FCEC8E6
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 21949
IP address blocks: 209.195.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:24:f8:6f:f1:01:ee:8f:ce:c8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=28a60f7f-3af4-41ce-99b1-8d4018240504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:56:a7:0f:12:85:b7:fe:f3:22:1f:e6:e1:c9:
8f:13:da:60:2b:f2:14:7c:df:22:dc:b8:1e:53:de:
50:dc:17:98:72:9e:97:c0:c7:da:76:d3:f6:0a:90:
47:c3:91:dc:a3:01:ef:3c:5f:21:36:b0:75:0f:03:
53:6a:91:2d:28:bc:17:8c:d2:68:a7:de:be:49:f9:
b3:1b:a8:7c:59:68:a3:1b:78:37:38:ff:4e:83:89:
9f:54:b7:22:7a:b8:64:41:0e:90:eb:a4:e1:b7:5f:
0d:ee:b1:3e:e9:0a:09:32:7e:25:93:6e:b8:1f:e7:
8d:c9:d9:d1:ce:10:4e:4b:61:1d:df:2a:d0:10:fc:
12:3c:02:91:38:51:4e:2d:a5:5e:03:92:ec:1d:53:
66:6e:48:d3:10:db:1a:4e:cf:aa:bf:2e:c6:47:b2:
42:09:09:4f:f1:03:e0:97:6d:fe:5b:44:cf:ac:79:
42:a3:97:32:67:16:09:e8:9a:52:a4:58:2c:ee:e1:
c2:8c:58:c7:25:ed:46:9b:36:bc:3a:fd:8b:bc:bc:
23:a5:29:ba:a2:48:22:d8:86:93:b6:f3:d3:7b:60:
cf:1d:7a:d1:f2:ec:23:14:0e:33:43:e1:91:fb:be:
2a:3d:c9:c9:ae:5c:73:b8:c0:80:0c:bc:12:89:c0:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9B:46:1B:75:79:BE:88:96:47:F1:74:7F:5E:8C:F2:23:D0:7F:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/6ef91c64-5a2a-31c1-8050-b72ae2dcd793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.195.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:fb:18:10:38:01:68:0d:49:89:c2:78:34:b4:d1:5e:0c:b0:
a7:0c:a6:e2:c3:dd:9f:6a:f7:1a:ef:81:48:5c:68:f7:07:b2:
2c:87:d6:24:ec:a6:78:ef:73:2d:b1:a9:2d:c6:28:60:f5:97:
75:18:dc:e9:e4:97:7a:4f:33:fd:b5:34:ac:f3:94:f9:3b:d2:
1d:38:0b:c0:e7:25:2b:95:bc:90:80:c4:c1:d7:0b:c8:94:de:
d3:e8:dd:d8:10:29:71:c2:6f:e7:eb:cb:86:39:49:0a:4b:ea:
4c:1c:22:b8:37:3a:bc:7a:54:fd:ab:33:0e:88:12:f6:29:cf:
e8:75:05:4c:93:52:44:70:37:ba:c2:f7:32:e9:f2:c8:da:b4:
b7:db:d0:36:20:21:e9:0f:46:41:b2:66:5c:3f:25:f3:51:27:
e6:0b:57:a2:3b:f3:34:2a:8b:68:fd:44:db:c5:e9:8d:6b:14:
2f:34:35:c7:72:ba:7a:a2:6a:10:b0:96:7a:3c:14:b3:1f:57:
76:03:ff:32:43:7c:9b:b4:e8:23:58:76:0a:69:19:f9:d6:a4:
35:bd:f3:86:e3:e7:bd:92:b3:46:c6:3c:93:8c:bb:e4:b3:e5:
a5:7a:9c:17:c9:ed:e1:bf:98:74:a6:87:c2:95:c7:83:59:df:
81:60:dc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:03 2025 by rpki-client