Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/31f91247-9bc4-37d8-97a5-c079d8b3b082.roa
File: 31f91247-9bc4-37d8-97a5-c079d8b3b082.roa (raw, json)
Hash identifier: cNrgl7/wRCoXePb4YhHB4h962F+23LgdJAos9dnDCgI=
Subject key identifier: 9C:57:B4:CC:F2:77:3D:47:72:DC:21:73:6B:72:CE:DF:32:44:B4:CE
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848265FF26E89641AC920A513E0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/31f91247-9bc4-37d8-97a5-c079d8b3b082.roa
Signing time: Mon 09 Dec 2024 14:00:51 +0000
ROA not before: Mon 09 Dec 2024 14:00:51 +0000
ROA not after: Sun 09 Mar 2025 13:00:51 +0000
asID: 19300
IP address blocks: 209.66.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:5f:f2:6e:89:64:1a:c9:20:a5:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 9 14:00:51 2024 GMT
Not After : Mar 9 13:00:51 2025 GMT
Subject: CN=f36eddaa-b761-424e-8159-d20f54514deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:be:55:d1:f4:a1:59:e5:34:40:91:a4:dc:
a0:29:fe:f4:6e:21:30:6e:5c:a3:48:e1:58:81:5f:
90:d0:b3:ae:07:59:36:f9:a7:93:e2:65:28:b8:da:
0b:b0:28:23:63:af:85:e9:0e:84:d6:47:7f:22:2a:
62:1f:ba:13:16:25:72:04:a2:5d:6a:25:37:c7:e5:
d4:c4:4f:cf:f1:b4:a0:59:00:cb:77:f1:81:a3:3a:
97:4c:41:40:aa:09:ee:d1:00:80:10:83:e6:c5:1b:
64:66:c9:fc:ab:2b:db:8e:6b:50:65:54:bf:dc:ae:
dc:34:07:a8:8c:41:73:17:fe:40:c9:fe:4d:53:99:
f4:fa:b3:69:9e:50:e0:2d:8c:e7:7e:e7:fa:ca:29:
04:7f:e5:3d:9f:b6:88:ab:f4:04:ab:c9:4d:f1:b4:
5c:aa:6f:a8:de:96:87:3b:c2:b9:fe:54:74:8e:c2:
6a:f4:49:d3:22:e4:a9:92:64:e7:37:13:9d:0d:ff:
40:1d:23:7a:31:fe:0a:fb:eb:4a:73:77:0e:29:62:
9b:16:c7:e2:80:90:fd:d3:b6:b7:e2:3f:b1:6c:9c:
a5:5c:ac:9e:4f:c9:e6:b8:b6:76:54:2b:47:90:bd:
9c:4e:e0:59:c7:c8:81:e6:16:6e:4d:72:3c:16:d4:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:57:B4:CC:F2:77:3D:47:72:DC:21:73:6B:72:CE:DF:32:44:B4:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/31f91247-9bc4-37d8-97a5-c079d8b3b082.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.66.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:48:56:0b:34:64:28:16:6f:a6:b4:34:04:5e:75:af:72:e9:
39:a0:e2:c5:66:f7:e6:99:b8:a0:f8:5c:0e:ef:0a:fe:d3:b6:
dd:af:a6:28:93:85:a4:c6:be:c5:c1:9b:06:2c:31:36:04:d0:
c2:76:2d:4a:d5:30:f2:4c:79:d8:70:18:84:95:e8:e3:eb:a8:
61:cf:95:40:22:f0:93:08:7b:3a:85:20:33:c6:79:95:14:91:
a6:c0:fe:15:64:f5:a3:bc:fa:fd:4a:6e:1b:53:3f:e9:64:74:
2d:76:39:0f:9a:fa:e6:9c:12:65:6c:49:91:69:d0:42:13:30:
a0:c2:31:78:7e:dd:79:3f:68:82:28:68:42:1b:59:f1:5f:72:
6c:b2:3a:eb:26:02:0d:53:8e:1d:82:93:54:79:0c:af:3b:a9:
95:12:38:04:75:e9:9b:9b:1f:44:40:5e:d9:58:c9:8d:10:64:
ae:c1:f9:4e:55:3b:20:8f:de:10:b8:41:f5:6a:7f:55:43:8e:
3d:ff:fb:8d:51:ac:5f:dc:d4:87:9d:a8:bc:f7:1b:79:5b:d6:
5b:be:b8:c4:74:15:0e:e5:02:da:2a:6f:4d:b2:0d:71:f3:71:
83:08:24:5a:9f:ee:da:04:ca:98:4c:25:91:10:98:c4:8a:76:
15:57:1c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 16:32:01 2025 by rpki-client