Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa
File: 43a5601d-1585-3131-be68-bff003a98cc5.roa (raw, json)
Hash identifier: 11RhqYlxawd5Q/BwwMFxO/d6qX+nkbo8hWjmTESKyd0=
Subject key identifier: BF:A9:FE:64:20:CC:47:D9:D7:75:8F:EF:6F:B5:ED:F8:24:34:56:95
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858486C2B1158B7A7A01759DF2280
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 13414
IP address blocks: 209.237.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:11:58:b7:a7:a0:17:59:df:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=d2fccb24-2cc0-4e5f-8882-46d4e2c9622e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:91:c4:9b:e8:a7:01:a2:3c:44:19:c3:33:
33:f9:b7:0f:47:29:f0:27:ae:fd:43:ed:d6:b6:39:
54:96:16:f4:23:82:3f:1f:4c:bf:44:33:c1:35:77:
96:01:01:36:49:5c:cf:eb:04:da:78:7c:a7:da:53:
cb:2a:81:9a:e8:82:5a:ed:8b:2c:96:6b:4e:6b:35:
21:9e:73:ac:1c:94:7e:9e:74:a2:71:fe:ab:0a:f4:
34:80:bd:9d:4b:ce:7b:08:d1:fa:b8:1e:c7:01:1b:
75:2b:32:50:22:70:a0:42:18:4c:bf:dc:24:88:b5:
49:6b:49:45:19:37:80:9e:cc:47:09:5f:38:62:69:
2e:8d:4a:77:01:2f:65:8a:78:c6:df:10:cd:0c:71:
ad:38:2a:b5:9f:be:ec:83:d1:70:c0:0e:ae:68:26:
92:11:9f:d0:54:c8:89:d9:52:b5:5d:1c:e7:3b:e8:
38:5b:45:02:94:6c:66:ea:f7:67:84:ef:a8:aa:bc:
45:9c:af:87:01:97:ea:1d:17:1c:3a:45:98:3e:12:
0c:47:ed:8f:62:ef:ba:78:26:fa:07:d5:16:ce:0d:
4d:d2:f9:46:8e:e2:a8:78:55:ec:56:9a:c9:75:5b:
0e:c7:76:5d:ba:d4:0b:8b:95:25:60:25:f6:b5:82:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A9:FE:64:20:CC:47:D9:D7:75:8F:EF:6F:B5:ED:F8:24:34:56:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:cd:6f:3c:7d:34:20:5c:e9:fa:a6:f8:d5:ac:cb:56:1f:6c:
b3:56:5f:75:6c:6f:c7:51:d7:0e:5a:55:7b:e5:e3:26:a7:68:
7f:0a:de:5c:7d:2c:e3:a0:9a:5f:d9:ef:93:f0:14:8e:cf:f8:
91:f1:7e:00:35:ab:6a:8d:f1:ca:81:29:0f:10:a9:1e:9a:15:
02:5c:60:06:64:6d:7f:47:b1:c4:8c:85:6b:49:c2:06:17:05:
4d:e2:50:cf:e1:80:f3:b7:82:97:0c:27:95:b5:d6:b1:65:db:
2c:b1:5d:b0:aa:be:71:ff:4e:95:2e:82:cd:4a:68:51:eb:fd:
18:d6:c0:4f:a1:c1:fa:ad:32:af:e5:d6:9c:4b:4b:73:03:60:
97:3b:a6:d0:97:36:e1:d9:d5:19:cd:3e:d3:d6:16:3f:51:7e:
bf:0f:40:00:f1:2a:ec:79:b5:ab:4f:02:7f:86:07:e0:fd:6a:
82:d2:44:12:37:a1:2a:01:ce:41:19:be:8d:dc:32:9b:5d:1e:
58:f7:85:ca:26:e5:e4:44:48:15:1d:a2:84:98:ee:32:03:e5:
74:42:9a:10:81:32:09:f0:63:ed:a4:ab:8c:18:af:f8:56:9b:
73:de:3c:57:5d:0a:e5:37:29:b2:15:49:c2:9c:cd:3e:47:d0:
72:d2:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:41:18 2025 by rpki-client