Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/49737f52-4ee7-31d8-85a9-95d9a2125406.roa
File: 49737f52-4ee7-31d8-85a9-95d9a2125406.roa (raw, json)
Hash identifier: SkWi214lUeIai7V5g92y/DQ4n3HjEbtQDC9l5puk3Lg=
Subject key identifier: 58:A4:80:58:51:9E:76:D6:A5:19:58:39:2D:F6:90:6B:99:08:F8:80
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848265FF9CD9F773A4D519AD200
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/49737f52-4ee7-31d8-85a9-95d9a2125406.roa
Signing time: Mon 09 Dec 2024 14:00:51 +0000
ROA not before: Mon 09 Dec 2024 14:00:51 +0000
ROA not after: Sun 09 Mar 2025 13:00:51 +0000
asID: 40050
IP address blocks: 209.221.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:5f:f9:cd:9f:77:3a:4d:51:9a:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 9 14:00:51 2024 GMT
Not After : Mar 9 13:00:51 2025 GMT
Subject: CN=616b2227-f74c-49e0-8baf-ec41a7bfcb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f5:03:07:d3:c4:6a:6c:a6:1c:56:80:94:8a:
53:11:69:06:79:eb:5f:04:ac:ec:00:2f:bc:99:8f:
ec:ba:5d:cc:cc:41:91:53:57:88:6e:b8:3c:5c:39:
f1:cd:79:be:49:ed:51:59:be:ee:eb:da:35:55:e5:
54:e0:24:83:ba:ac:33:8a:51:6a:12:d0:f6:89:38:
d7:2a:84:d6:f2:45:c8:82:db:34:88:12:89:14:57:
d4:d3:0d:bd:24:41:25:51:f8:c0:23:38:a4:5b:c0:
97:e0:4d:38:a3:d7:93:4e:5c:9f:48:e9:e8:ff:2b:
03:d9:81:87:43:a8:8e:a6:8b:8d:b0:0b:4c:c5:b7:
ec:54:de:99:07:c1:31:07:14:14:7c:e0:6b:dd:f6:
00:80:2b:9d:07:4c:54:3b:a8:9f:99:28:97:d9:c4:
3c:80:28:5a:22:7b:e6:80:f3:ce:4b:bb:d2:44:4f:
9e:ee:a8:92:f7:45:30:69:39:a4:a0:5f:3e:80:f3:
82:1b:e1:26:f8:21:9a:32:09:77:9a:42:d5:6f:95:
34:13:b7:29:d3:eb:5a:d3:98:f7:e0:0c:7f:db:9c:
ef:08:d9:e8:f2:d7:1a:1d:92:bf:a4:8f:e4:67:c0:
28:b4:91:62:b8:45:0b:86:75:ec:3b:97:ff:a5:40:
ee:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A4:80:58:51:9E:76:D6:A5:19:58:39:2D:F6:90:6B:99:08:F8:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/49737f52-4ee7-31d8-85a9-95d9a2125406.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.221.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:41:15:96:27:c1:42:d4:f9:eb:f9:d1:b6:6e:55:87:26:a1:
67:a8:0a:fe:1e:25:41:a1:1d:b7:cd:57:3e:95:86:41:57:2e:
1c:ea:32:a1:7c:1c:56:db:bb:e8:a7:99:28:3b:f6:97:a4:54:
11:2b:68:db:f7:1c:cf:53:29:01:c0:a3:c3:e1:9b:0d:8c:66:
c1:ca:c5:5b:23:63:82:c1:ba:e5:79:b5:87:2a:34:9a:b1:35:
e1:82:24:df:06:e1:8c:92:d4:cc:e7:05:2b:7f:bd:bd:f2:06:
92:fd:b3:5f:d1:b5:e2:d8:02:c4:4d:5f:80:56:48:ab:3f:15:
bd:e7:3a:e6:bc:5c:9c:20:e8:f3:5a:fb:71:aa:32:0f:b9:31:
8f:22:1f:bc:da:74:5c:79:ea:06:ea:ab:d6:62:dd:94:db:07:
af:0b:9e:49:5f:99:74:1b:68:a7:c2:04:f4:ab:e6:7c:9a:ce:
e1:2a:95:43:ca:61:d8:c3:4d:65:d6:34:c8:e2:a7:fc:16:80:
85:a5:c4:12:0e:97:f5:8c:96:ad:96:a2:55:6c:0b:5e:70:80:
2f:e3:d4:8e:e5:27:d1:e9:4c:6d:8c:9f:44:ce:6d:0c:0c:1a:
5e:70:6b:3c:c3:39:fb:c1:a4:1a:80:e8:c3:81:f2:4e:13:48:
df:61:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:36:48 2025 by rpki-client