Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa
File: 0c0b966f-cc08-36fa-8094-773d54a45b9d.roa (raw, json)
Hash identifier: BjzHGctl7N3uOaILTcfOzSF2gUAMzSjqsL1z/OxL5wI=
Subject key identifier: C3:65:5E:70:03:7E:43:B0:A0:D3:6A:5E:0A:4C:91:B1:10:EB:1D:F0
Certificate issuer: /CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9
Certificate serial: 010D0C9F432858483E1AACF3F74B95E30DCC66B0
Authority key identifier: C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 396982
IP address blocks: 209.209.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:ac:f3:f7:4b:95:e3:0d:cc:66:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=c098bb61-9460-4d14-afc6-b3528cd799f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:aa:41:ab:2f:eb:1e:80:da:61:1d:b5:b7:e0:
60:25:76:c9:42:d7:e0:92:9c:05:40:ce:49:39:41:
df:47:e1:51:48:6a:8c:fa:32:c3:fe:12:b6:c0:e9:
f2:ea:b9:0d:24:8b:ae:f2:d1:6a:cc:40:2f:27:af:
92:5b:d7:14:70:13:f4:6e:7a:d0:a8:31:1a:ad:8a:
93:5e:f9:ed:db:46:55:04:c4:4a:19:6f:d4:e6:61:
85:03:06:ca:cb:e5:a3:8f:60:1c:48:b6:f5:03:23:
55:61:05:50:96:60:33:08:3e:ba:3a:0d:d9:04:89:
c6:0f:ac:12:c0:32:94:15:9d:75:0b:c6:67:f0:f1:
06:e4:aa:51:7a:ab:5c:dd:4d:70:c7:84:55:7d:88:
b9:59:11:68:8f:a9:31:05:c1:ee:66:35:63:4f:a8:
b9:f4:6b:d2:a4:98:81:dc:ac:7d:75:df:0e:69:86:
80:51:b7:3c:ed:50:34:2f:79:04:2d:bf:c6:b6:97:
8a:44:30:5c:93:fa:0d:f3:15:88:f5:1e:62:5c:44:
5a:5e:ca:b8:44:99:f5:8b:ca:07:b3:6f:ed:61:d0:
8c:76:e8:d2:fb:e9:dd:32:8a:33:bd:5f:3c:eb:c8:
f1:fc:11:2e:5e:ce:58:09:ce:03:2e:0f:cb:54:a4:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:65:5E:70:03:7E:43:B0:A0:D3:6A:5E:0A:4C:91:B1:10:EB:1D:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.crl
X509v3 Authority Key Identifier:
keyid:C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.209.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:46:cf:d5:41:c6:fd:54:1b:e6:7f:f6:f3:11:d6:d0:94:99:
9f:1b:b3:29:3b:8a:73:cb:7d:3b:c6:12:bf:aa:64:9c:6e:a2:
71:8c:9f:02:12:1b:97:fb:04:51:50:1f:d3:39:8d:9b:80:cd:
19:d4:29:8a:6d:5f:e1:2a:3f:02:15:a9:c8:68:d9:c5:fe:d4:
c1:bd:16:96:b3:46:e5:98:a4:2e:42:23:67:43:65:4e:df:4a:
40:c4:a8:f9:00:ef:32:71:43:68:e4:7e:4a:36:9d:7d:29:fb:
aa:f2:bb:85:00:60:34:7c:3d:1e:5f:15:01:6e:80:ce:15:58:
45:4a:03:5e:d7:4f:8e:26:6b:fd:6b:4a:31:1d:bd:7b:13:87:
87:87:89:e2:c0:f6:ef:6c:ad:05:89:7b:7d:0a:a6:ae:5a:1c:
bf:62:6d:14:72:01:67:8b:3f:70:f9:c6:49:c2:e5:83:1f:b8:
27:13:08:2e:32:a3:f8:88:e4:d4:cf:d2:b2:bb:d5:9b:c2:f3:
09:2e:bd:ce:92:2d:ab:d8:f9:d3:0f:ab:1a:70:be:da:9c:3f:
cd:87:13:0e:ca:07:6e:fa:0b:b9:49:49:01:a8:29:4f:de:5c:
d5:bd:5b:83:6e:81:53:2b:3b:a4:53:a5:0c:4d:99:2c:2e:17:
87:3f:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:58:36 2025 by rpki-client