Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa
File: 7253bf54-50b6-3248-9cd9-f777bdd3845d.roa (raw, json)
Hash identifier: 2xkncqZxJpKkHUHLU1M7EyIs102nyTZRQxplclP/AV4=
Subject key identifier: AE:36:99:77:0D:7F:54:47:C2:E5:04:4F:0E:02:E4:DC:CC:BB:FB:86
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F432858489A3B47E9E685963FAC9D5600
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 13536
IP address blocks: 209.198.82.0/24 maxlen: 24
209.198.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:47:e9:e6:85:96:3f:ac:9d:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=15a7f1e7-cefa-4484-b0c9-695fc1616a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:68:d2:44:78:d3:72:13:51:8d:67:ca:df:05:
4e:85:b5:e2:1d:ba:e7:ab:04:a0:5f:88:35:61:91:
be:db:5f:60:e5:8c:35:86:f5:f1:91:c1:94:db:88:
df:e7:60:de:bd:15:29:1a:be:70:a1:f7:d6:67:33:
85:32:79:e4:9f:2e:2c:84:a0:95:6c:82:dd:db:64:
a9:3a:6f:a6:e8:58:31:b7:6d:7a:d3:ca:bf:bc:4d:
76:e7:5e:00:df:c1:fe:d5:e7:64:34:f8:27:9c:70:
1e:fc:49:e2:74:13:86:21:42:87:60:1a:a3:09:4e:
56:f9:6d:27:3c:0d:f9:f4:ec:77:e9:42:55:37:28:
12:a9:db:50:f3:3e:05:52:f2:cf:03:4e:2f:40:7a:
76:49:e6:85:85:98:1e:75:df:7f:06:75:6f:19:6e:
e1:b9:f6:c9:d6:6e:9c:88:75:32:b8:88:8f:8f:d1:
33:7f:db:57:23:0d:96:42:6b:e1:eb:e7:5b:00:c3:
54:bf:dc:be:50:bd:1d:cb:bc:a5:92:68:f0:15:f4:
da:0f:58:34:91:23:c4:e0:c5:cf:15:b7:85:d4:0e:
32:10:e5:47:e3:9c:55:34:2b:b6:06:c0:90:d6:e0:
7f:15:b3:6c:d5:72:11:3d:66:bc:ea:35:b8:69:3b:
6a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:36:99:77:0D:7F:54:47:C2:E5:04:4F:0E:02:E4:DC:CC:BB:FB:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7253bf54-50b6-3248-9cd9-f777bdd3845d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.198.82.0/24
209.198.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:95:94:58:b0:e0:ca:5e:26:ec:32:f7:ca:31:38:1d:29:b8:
9f:bc:ce:70:ab:9d:7d:04:5b:dc:fd:a4:15:42:ed:e7:a2:94:
9d:3e:0b:28:2c:be:bb:aa:05:4d:5a:ad:d1:fd:b4:e0:8e:3f:
a3:6e:be:64:5a:1e:8e:e3:7e:82:2d:bf:a7:76:30:1e:28:fa:
cc:b8:86:69:73:fd:a7:a5:55:0b:2d:dd:54:ee:9c:f1:7f:ae:
9a:1f:d5:05:0a:92:8b:a0:62:ff:57:8b:ed:4b:5d:56:ed:83:
71:30:73:f2:48:4f:2f:61:5f:5d:74:c4:54:81:1c:da:7f:e8:
94:1b:c4:e8:60:64:41:d2:cd:60:f3:f6:6e:b6:01:2f:74:96:
a6:29:d6:b7:c2:83:7d:26:30:93:bc:5b:86:28:53:6a:5c:51:
9c:bb:8c:9b:43:1d:78:6d:3e:4a:ed:55:b4:d2:11:a6:20:56:
9f:94:93:ff:1c:d9:44:84:54:8d:93:f1:44:d3:bf:5b:d5:90:
a1:6e:77:af:43:85:91:87:97:cb:21:70:5c:80:32:cf:51:6a:
88:ab:4c:5a:0a:a3:ff:d8:dc:c3:73:c1:c8:65:4b:5a:fb:5c:
18:62:c4:e7:f6:8c:46:ee:21:de:52:b9:b9:fd:28:b0:af:3f:
c0:8e:82:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:39:27 2025 by rpki-client