Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa
File: 3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa (raw, json)
Hash identifier: UY2Sw1D1WEaxwWvC27N+2N5R8Lae0Do5bIB4qOrqPsw=
Subject key identifier: 28:8F:82:F6:57:67:EB:48:9A:76:AD:33:F8:75:D1:62:9F:82:57:13
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858486D904D099B745BC103B0BCC0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 13414
IP address blocks: 209.237.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4d:09:9b:74:5b:c1:03:b0:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=f8392631-35fc-4298-8c85-b92a836e06ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c3:68:03:74:77:f4:c1:a6:ce:2b:2a:ac:08:
35:dc:fa:2a:61:30:79:4d:b8:7d:d7:8c:51:99:90:
92:9b:2a:aa:d7:46:3e:07:ef:8b:6a:6f:4e:37:69:
d8:52:26:14:bd:52:66:75:e1:59:01:e2:8a:6d:34:
5a:d9:c6:e7:d6:96:10:ca:c7:e1:72:fc:90:23:08:
55:3a:73:49:ee:56:af:11:bf:05:40:96:5f:c9:48:
9b:8e:4f:16:8d:fb:61:d7:18:54:b5:b8:b9:18:f8:
87:ef:c0:ee:c0:bf:98:32:de:ab:60:63:7a:e5:dc:
64:c6:4d:81:d7:a4:bc:93:97:60:0b:24:e9:22:d8:
a1:3b:57:67:e0:a6:9f:29:f2:dd:8d:3f:07:16:3f:
de:95:e8:ff:c9:3b:0c:75:88:78:32:ac:47:51:24:
cc:7c:0d:de:bc:4f:75:d4:44:4f:48:3c:e3:0a:5e:
6a:d8:57:15:c0:a7:34:81:86:c0:b4:f3:55:55:10:
74:33:a0:8d:bb:18:9e:e6:ea:37:63:39:9e:aa:17:
b6:d0:fe:b5:e8:14:08:93:9b:db:98:fb:98:9e:79:
8e:7f:c0:87:d8:b6:33:ba:26:3c:6a:f1:37:64:90:
e5:e7:86:e1:b9:c7:22:b2:1c:4f:1c:a5:7d:6b:2e:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8F:82:F6:57:67:EB:48:9A:76:AD:33:F8:75:D1:62:9F:82:57:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3727bb01-e2bf-39d3-b8a0-b0e2572a970b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:ff:c2:54:ab:4d:2e:94:a1:00:b2:a3:6e:db:1c:18:79:92:
31:56:ba:c2:af:76:e3:78:e2:1d:ba:69:6d:53:8f:07:3e:d9:
39:eb:46:21:00:49:13:1c:e6:b1:13:73:80:cc:65:fd:cf:a8:
91:58:16:00:c4:0b:e4:09:42:1c:f3:d9:82:3c:98:c2:49:fd:
60:3f:f3:91:07:a3:51:b9:30:6c:f4:4a:74:40:7d:64:cf:56:
d9:9e:8f:d7:8b:44:5d:f6:25:32:24:16:7d:37:19:68:6e:d7:
34:dc:a1:f3:ce:ba:9e:ad:68:2a:26:96:86:3e:78:00:4f:5c:
ee:b8:26:3d:18:69:b3:5b:cf:1f:cd:95:aa:86:7c:9b:4e:f6:
3e:c8:69:e3:47:8a:59:ca:1e:f9:34:2e:b0:53:e5:c4:48:1b:
33:fa:df:f0:a4:0f:1e:80:a7:a7:f8:52:98:cb:47:cf:7f:c3:
95:80:ec:c4:b4:be:38:b0:2b:f9:09:1f:bd:b5:f2:08:f0:7b:
a4:e6:95:d2:59:c6:53:80:8e:25:2d:cf:99:f6:9b:64:c3:5c:
2a:0a:68:e0:1b:2c:5f:2f:c0:ae:ba:83:f9:16:ac:69:8b:e2:
c5:15:7b:c7:db:e6:c1:58:35:80:f5:a6:ea:77:1c:72:40:1e:
2f:a0:ad:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:25 2025 by rpki-client