Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa
File: b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa (raw, json)
Hash identifier: felaljvo6cNxkKRlUCWBo2Epd0GTatP6h+H+Z5O7rWg=
Subject key identifier: AD:23:C2:AE:C8:AA:66:58:B6:6E:00:79:20:F6:BC:81:F4:CD:4C:13
Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial: 010D0C9F432858487325A40EE729811D4830FBC0
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 395301
IP address blocks: 209.172.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:a4:0e:e7:29:81:1d:48:30:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=530459ca-8cac-4fef-998a-b3d80f9943a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:84:55:16:48:a4:62:94:0c:9e:47:45:48:
e5:2d:db:cb:27:60:a7:c2:13:f6:a2:ee:74:5c:9c:
06:d5:3b:6d:05:67:1b:7e:c9:12:0b:7d:86:1e:69:
4e:b7:28:b1:e1:b3:d7:0d:99:88:df:e7:ad:57:cd:
4e:8c:91:ce:44:dd:c9:45:40:e5:c3:07:32:ac:db:
32:60:81:d6:65:b7:05:1d:86:67:ca:25:1f:27:c5:
6a:86:6a:41:ef:ba:d0:0c:3f:21:fe:04:a2:de:4d:
32:4c:ea:41:4b:6f:fd:7f:9e:1c:49:55:37:bf:63:
6e:b3:93:98:5b:ed:0b:70:1f:4b:ef:43:74:99:84:
a9:fa:9c:e9:b0:2e:4c:d1:5f:25:4f:16:25:e2:ae:
1b:09:84:4d:c0:c2:1a:e9:9a:bb:6f:a1:20:28:a1:
cb:e8:a0:0b:1f:5c:ef:65:83:b1:1f:d7:95:7e:16:
d0:a0:ef:78:db:e0:05:84:b0:7e:6f:4c:c2:15:67:
e2:82:bb:a8:b8:30:b2:51:a2:ed:53:d4:a4:c3:9a:
2e:fe:02:8b:4e:27:59:1f:6d:8c:de:1e:86:31:2a:
7d:54:f9:a4:37:67:3e:4b:fe:94:2a:d6:f6:e4:58:
d9:13:58:59:be:77:cb:46:57:8e:ce:4e:71:85:30:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:C2:AE:C8:AA:66:58:B6:6E:00:79:20:F6:BC:81:F4:CD:4C:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
X509v3 Authority Key Identifier:
keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
sbgp-ipAddrBlock: critical
IPv4:
209.172.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:7e:d0:38:68:e3:3f:7d:73:c6:51:22:20:d1:de:ac:ce:e4:
8f:ef:02:76:eb:81:65:ea:9f:5f:09:9e:e0:db:96:08:62:45:
58:ec:b8:26:0c:46:ce:2a:9c:52:d6:56:37:45:3e:c0:b7:a6:
31:8f:3a:9e:03:07:38:50:28:b7:37:f1:6e:25:da:23:c9:6a:
9f:96:be:29:bc:b4:e0:c0:30:b5:62:97:ca:0d:a6:21:5f:f8:
17:40:4a:f1:69:4f:eb:7c:02:ee:56:c7:14:a4:a3:3b:98:cf:
4b:ae:95:60:1e:08:72:22:c6:10:66:80:b9:95:13:a4:d2:f4:
2d:f0:dd:ce:ee:1d:0e:e1:07:b1:49:f1:bc:db:ab:50:0b:f5:
69:5a:ef:00:9b:e3:4a:6e:77:13:21:47:8d:f9:43:6c:3d:ca:
4e:d1:c4:80:f4:49:b0:0e:4c:96:9b:25:ed:4b:a8:e0:d5:42:
9e:ba:b8:84:45:6d:cf:8e:b4:f0:6e:d5:e0:09:19:0a:33:6e:
e2:71:fe:71:0e:88:0f:42:ba:64:3d:43:7b:3f:ab:3d:41:09:
81:6a:2b:9b:e2:75:1c:c5:1e:96:a2:13:ee:e0:8f:ca:cc:5f:
39:ef:b4:14:7b:36:60:3d:f9:13:62:60:a2:ed:e9:d0:ca:78:
f7:06:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:28:44 2025 by rpki-client