Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af7f3c45-d998-35b5-8659-4ad7ca60b550.roa
File: af7f3c45-d998-35b5-8659-4ad7ca60b550.roa (raw, json)
Hash identifier: yttvp237xHrieAoJ4YPulB0BD7GkEHal5sg0cSENTcM=
Subject key identifier: 7D:2A:8F:D0:9B:81:70:73:69:A6:1E:C5:1A:62:06:54:44:F2:36:6B
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848265FFAA6FE58F8D23FF4BE00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af7f3c45-d998-35b5-8659-4ad7ca60b550.roa
Signing time: Mon 09 Dec 2024 14:00:51 +0000
ROA not before: Mon 09 Dec 2024 14:00:51 +0000
ROA not after: Sun 09 Mar 2025 13:00:51 +0000
asID: 395279
IP address blocks: 209.249.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:5f:fa:a6:fe:58:f8:d2:3f:f4:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 9 14:00:51 2024 GMT
Not After : Mar 9 13:00:51 2025 GMT
Subject: CN=f653ad10-dfce-49eb-9433-17c83a5935da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8e:8e:55:f9:af:5d:a0:22:c3:ee:f5:e5:25:
dc:bf:97:00:bc:06:d2:43:81:d7:45:0e:3f:af:c8:
f9:6e:85:8e:05:68:43:e4:a4:15:d1:7f:5b:0a:74:
5f:4f:14:9b:58:f5:d8:f4:ad:48:8c:0a:ec:37:86:
8e:5d:28:be:7c:43:bf:33:5c:88:80:2f:b1:df:1e:
07:2f:1b:d9:41:0a:04:02:af:9b:2a:bd:74:bb:86:
df:af:34:5e:9a:98:2e:b8:80:80:5e:84:7e:d5:45:
ee:53:75:8d:44:0c:8a:34:24:76:4d:ba:d2:a4:09:
76:cf:9f:a9:dd:c7:4b:40:b1:3e:05:27:1f:da:18:
3d:8c:64:fe:2c:4d:7e:ab:94:c7:7f:c3:df:8b:cf:
fc:11:c0:6f:6f:62:da:37:0b:1a:74:c5:31:8f:ff:
4c:84:c4:03:e0:ac:2d:5c:bf:68:6a:ba:81:9c:a1:
63:4c:3d:f2:b7:de:d4:31:55:0e:1c:b2:ce:a2:3a:
d7:07:6b:2c:4d:f5:5e:df:79:59:2f:ba:a0:0b:4f:
2c:d4:06:49:69:38:76:89:c9:11:22:4d:ee:e8:46:
1f:02:03:f4:91:cd:12:ac:16:14:43:0b:3e:f8:c0:
1f:49:1a:36:3b:ce:10:99:5f:01:6d:6a:d1:51:82:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2A:8F:D0:9B:81:70:73:69:A6:1E:C5:1A:62:06:54:44:F2:36:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af7f3c45-d998-35b5-8659-4ad7ca60b550.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.249.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:f8:e0:f6:c4:99:ae:b8:96:95:94:5e:5e:4d:ef:0f:7a:d3:
db:23:47:51:76:f8:bd:64:bf:36:88:65:03:12:19:b3:2b:34:
11:97:09:2d:b5:6a:ab:27:23:02:3f:34:42:4e:40:8f:09:bf:
a9:d6:1e:1e:2a:21:eb:0d:74:d1:2d:d1:a7:4d:ef:29:56:b6:
23:5f:aa:4f:08:57:e7:80:a9:15:ac:24:28:72:79:e8:70:2c:
ca:c9:ae:d4:fe:78:3a:a9:f4:c3:3f:4d:28:41:b2:05:83:28:
db:b6:4a:51:16:4f:1b:69:d0:20:83:3b:1b:81:db:8f:47:d9:
2c:0a:e5:05:34:d4:a9:fb:8b:cd:a2:98:1d:f7:de:27:21:20:
cd:15:56:31:ca:8a:f2:5b:a5:e5:ae:80:9a:05:29:04:09:3b:
db:eb:a6:d1:6f:dc:94:a0:0b:5b:89:0a:c9:d7:f6:fb:79:b4:
61:12:9f:7d:b1:4b:4f:81:70:f4:76:6e:31:c6:bb:b4:39:9e:
27:6c:a1:65:61:71:db:f7:bd:02:e7:19:5c:5b:0f:e2:91:fa:
2a:f5:e7:e9:4f:67:b9:df:72:ca:7b:78:17:4a:5f:b1:3a:e3:
23:ea:50:c7:c9:bf:c8:7b:66:64:19:55:7c:7f:63:04:b9:30:
67:20:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:22:49 2025 by rpki-client