Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c3a7c81c-eeec-367e-aae1-7a8d050c3b15.roa
File: c3a7c81c-eeec-367e-aae1-7a8d050c3b15.roa (raw, json)
Hash identifier: Lk1CSAoiQEWPJbx0QVUFiWNSAYQWwad7EAfqVlmh/iY=
Subject key identifier: A1:1C:CC:04:16:25:CC:F1:E5:9D:0C:4F:FB:D5:71:ED:D8:9F:07:BD
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848265FF96B7FC973405F691C80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c3a7c81c-eeec-367e-aae1-7a8d050c3b15.roa
Signing time: Mon 09 Dec 2024 14:00:51 +0000
ROA not before: Mon 09 Dec 2024 14:00:51 +0000
ROA not after: Sun 09 Mar 2025 13:00:51 +0000
asID: 18888
IP address blocks: 209.133.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:5f:f9:6b:7f:c9:73:40:5f:69:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 9 14:00:51 2024 GMT
Not After : Mar 9 13:00:51 2025 GMT
Subject: CN=98e9e651-6fc6-4c28-bf1a-2ba52c1f1070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:30:be:44:61:f3:29:f5:57:af:77:3c:6f:
1a:1d:16:0c:4a:c4:3c:82:d7:74:3d:9e:69:24:43:
40:46:75:8a:a2:98:f1:2b:e3:8d:fc:d6:fe:92:54:
bc:8c:b5:22:2b:49:cc:03:50:b0:aa:43:2e:c3:57:
bb:0f:1a:c4:d4:98:0e:95:ad:53:38:35:69:36:57:
52:75:5c:aa:fc:8c:5c:a8:79:97:c3:5f:92:2b:8f:
bb:6b:af:7c:b0:09:7c:80:f6:52:e1:a5:4d:6d:80:
e7:ae:59:1c:24:05:c7:8c:23:62:ce:88:8a:a0:95:
d5:e0:02:ce:ab:7d:3d:78:3b:f2:92:be:8a:49:62:
e5:7d:aa:ed:b4:c9:b3:78:1e:06:66:25:42:56:f4:
f6:86:72:53:6c:3f:0b:2a:94:2f:74:82:f0:3f:0f:
87:5c:76:f5:16:d2:9d:7d:90:ed:63:da:8d:2c:b5:
61:e2:16:43:ad:25:af:93:70:69:ef:c8:3b:b6:fe:
cd:45:dc:50:d7:2c:d6:72:81:9c:65:7b:2a:e3:b3:
2f:5a:ef:1b:e0:b3:6b:1c:aa:f0:9f:5a:fa:1a:df:
8d:e0:25:74:86:cd:f2:80:18:ef:8f:08:a0:5e:1e:
ce:bf:6d:b2:dc:dd:de:3c:e4:96:81:f8:89:b2:53:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1C:CC:04:16:25:CC:F1:E5:9D:0C:4F:FB:D5:71:ED:D8:9F:07:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c3a7c81c-eeec-367e-aae1-7a8d050c3b15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.133.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:76:c0:ef:59:f7:67:35:68:b5:3d:33:ba:13:9b:16:4e:d8:
60:05:bd:d0:2f:2d:93:7b:b7:28:af:29:de:72:59:cb:20:07:
a6:63:c4:7e:6c:33:77:98:0f:f0:ce:81:03:10:c8:c7:70:5e:
68:75:21:8a:4d:ca:06:5b:c6:55:79:8e:ee:f6:c3:ab:a4:a4:
89:97:1b:d0:4b:7e:e7:b4:a1:36:81:66:7d:bb:dc:a4:49:0f:
07:7c:25:bf:70:bf:05:47:e4:11:a8:50:98:56:b3:3b:d6:92:
13:4c:48:1a:0b:37:8f:d5:8f:e8:cf:bd:87:68:e5:97:92:6e:
12:3a:40:6c:be:d1:ec:7d:65:b0:4f:23:53:19:50:cf:e0:c9:
c5:7c:41:fd:39:c9:cf:c1:89:2f:89:b7:c8:58:52:33:b5:b9:
6d:8d:fe:06:de:9b:de:b6:24:22:75:91:76:8f:80:d1:5e:4c:
56:28:69:47:07:e5:f4:fa:26:7f:20:6a:79:4a:ee:2a:10:cd:
87:4d:7b:e2:29:b5:45:bb:de:ea:75:10:ab:34:88:0e:fd:5a:
8c:18:06:b5:f3:c1:21:bf:5d:a3:25:2c:d8:32:15:c2:55:6f:
aa:82:c5:9d:95:57:c8:ce:76:6a:49:0c:c4:c6:94:03:2f:48:
91:b0:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:43:39 2025 by rpki-client