Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e74295e1-3fea-318a-91c9-1152af362bcd.roa
File: e74295e1-3fea-318a-91c9-1152af362bcd.roa (raw, json)
Hash identifier: HTvAnDN1bJXu4AVuGPSN5QDOjpdA1yLD9Xt5LOdC3zE=
Subject key identifier: 53:4F:F7:32:15:CF:25:D9:92:EB:90:8A:CA:CE:44:9B:53:CB:04:ED
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F43285847E35F72E3B58D342913396080
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e74295e1-3fea-318a-91c9-1152af362bcd.roa
Signing time: Fri 15 Nov 2024 14:00:39 +0000
ROA not before: Fri 15 Nov 2024 14:00:39 +0000
ROA not after: Thu 13 Feb 2025 14:00:39 +0000
asID: 10397
IP address blocks: 209.209.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e3:5f:72:e3:b5:8d:34:29:13:39:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Nov 15 14:00:39 2024 GMT
Not After : Feb 13 14:00:39 2025 GMT
Subject: CN=6fb44612-aa89-4021-ad30-8daf2072687a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:09:81:f9:a2:ae:2f:37:ed:80:86:5b:52:54:
f6:c1:d9:fc:e2:d6:a8:39:be:b4:d4:9e:b2:87:79:
e4:48:98:8f:49:61:e4:90:98:a2:30:68:5f:3b:c6:
6a:cc:28:bf:10:42:d8:c4:89:e3:6c:9f:72:2f:f8:
6c:4b:d9:0c:d7:f7:97:5f:dc:0a:69:bf:97:5e:b5:
a7:d7:07:b5:2f:0f:83:1c:62:a7:dd:55:4b:e8:1b:
06:15:6b:82:ea:8f:09:71:46:b0:6c:97:b2:2e:b0:
83:2c:b7:6e:41:4f:ef:0f:2f:07:35:34:c9:a0:e9:
ef:f1:eb:8e:63:93:f0:00:05:0f:eb:7b:a9:30:39:
3d:27:f8:3a:32:76:c9:2a:ae:80:70:87:bf:4e:16:
84:b1:cf:62:28:70:6a:b2:80:ba:fe:6f:b4:54:68:
7b:78:4a:01:16:c2:b1:d6:35:89:69:92:82:63:b9:
f4:df:0d:a7:35:0e:d3:54:3d:3d:c2:9c:f4:c6:db:
72:ac:e8:f8:97:dd:5f:d3:43:30:af:eb:82:d5:cb:
96:43:76:2e:21:cc:85:f0:52:65:d7:5d:56:26:f2:
bd:2f:25:6a:44:b7:d1:68:1b:de:76:4e:75:a1:4f:
c5:6b:4b:39:97:75:f3:3b:22:e9:ef:27:fd:25:61:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4F:F7:32:15:CF:25:D9:92:EB:90:8A:CA:CE:44:9B:53:CB:04:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e74295e1-3fea-318a-91c9-1152af362bcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
209.209.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:31:49:b2:58:41:42:94:e3:ac:17:62:a9:26:57:94:c0:1c:
43:6c:c3:11:41:ff:3f:7e:20:0c:18:a5:53:4b:0f:f8:7d:05:
a1:aa:dc:e4:39:e5:cc:a9:b2:10:9d:4c:df:85:8f:8f:7d:05:
0b:aa:3f:91:0c:ca:9b:8d:c6:08:4e:70:b2:4e:00:e0:35:8d:
02:ea:a7:22:8e:0d:a6:41:c9:39:85:4e:41:c1:54:92:56:1e:
53:c7:47:ef:78:bf:87:6b:8b:86:62:40:b0:af:18:23:a9:af:
92:33:67:49:d2:94:50:8d:bf:27:2b:a0:4f:3a:07:85:a6:e1:
a3:ba:a8:74:2f:5a:17:55:3f:b8:74:b0:f7:f9:66:9a:9e:5f:
f0:d6:df:06:05:e2:33:db:58:b0:ec:c2:e3:6e:40:31:16:5f:
43:5e:c2:24:ee:a1:b5:0b:94:1f:40:91:3b:47:1c:dc:8e:ed:
11:5c:5c:52:ff:d8:90:21:ff:3b:01:f3:88:68:aa:97:bd:d8:
5f:59:5f:59:8f:f4:6b:da:00:1a:96:a0:f2:f8:93:92:e8:75:
27:45:c7:23:3b:c0:36:10:87:8b:ce:fa:54:46:b0:48:25:e4:
69:0b:45:38:47:08:c7:e9:09:3a:36:64:9f:a3:27:bb:9c:eb:
d6:04:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:50:12 2025 by rpki-client