Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa
File: 49e5f290-618f-3550-b059-0c6232263b33.roa (raw, json)
Hash identifier: grrINFqxrEWa8nvVh+rOjXgBWyjMWlK9tlHO23yeSsU=
Subject key identifier: A5:04:98:F9:84:5C:45:4D:51:86:F8:8E:2E:C8:CE:31:37:6B:BD:13
Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a
Certificate serial: 010D0C9F43285848897B2004EAD28FE552CABD00
Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 11739
IP address blocks: 209.20.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:20:04:ea:d2:8f:e5:52:ca:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=f384d6e3-b920-454e-b14d-5054667eb71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:12:fa:f7:6c:90:87:63:20:da:62:9d:5c:e4:
75:72:04:0b:31:26:8c:95:dd:fa:c3:13:c1:c4:26:
63:fd:89:3a:f7:41:2b:06:48:66:5f:f4:75:58:a4:
88:24:78:c2:26:0d:52:cb:66:dc:61:d2:1f:cd:15:
9f:d8:12:05:e0:cc:c5:da:b7:46:30:cc:3d:e9:22:
3c:a8:90:c6:92:ec:08:90:c6:4e:3a:d9:ab:1c:60:
12:a1:a5:71:83:8a:c3:f7:e3:8b:48:4e:d7:ed:2e:
d1:6f:86:97:70:21:e7:b0:bc:10:71:e1:08:a7:4d:
bf:d8:26:2c:ed:8e:03:29:a8:7a:8b:ab:86:e1:2e:
fe:79:94:cb:b4:0c:73:2f:ec:ae:91:44:47:f7:ed:
51:94:2b:cd:56:f0:37:ad:b0:63:76:a5:72:3f:f7:
64:e1:de:c8:bb:da:ce:05:ea:6c:7d:42:90:5e:67:
27:da:d6:1e:45:82:68:57:28:8a:b6:f8:58:e9:9d:
c2:7b:5a:4e:9f:c1:f8:1b:d4:16:dd:a7:87:41:a7:
78:77:fe:98:a0:3e:cf:9a:a5:1f:32:e6:8b:cb:dc:
79:ac:54:cb:b3:ef:8b:0c:eb:fa:87:35:a5:a3:2e:
fd:d4:21:9d:95:56:c7:a8:52:d8:75:b4:da:10:02:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:04:98:F9:84:5C:45:4D:51:86:F8:8E:2E:C8:CE:31:37:6B:BD:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/49e5f290-618f-3550-b059-0c6232263b33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl
X509v3 Authority Key Identifier:
keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.20.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:53:43:61:9d:a9:e4:3d:b5:7e:c0:81:73:2b:0c:1b:69:8e:
0e:51:e5:24:e2:96:6a:0c:b8:51:c1:ef:89:50:23:46:67:3d:
f9:7f:08:f3:7f:56:93:bf:42:fd:5c:ae:eb:36:95:bd:45:88:
e3:a1:b3:b1:31:a8:3f:8e:3c:40:c3:2f:a6:4b:dc:19:97:12:
6d:2d:8d:3d:08:a8:8f:ba:88:c8:74:67:31:f4:b3:6e:e9:87:
66:9b:bb:82:b2:de:66:3a:48:d3:79:51:a0:97:6e:96:c6:37:
95:ec:52:18:91:c2:86:3d:81:6f:25:aa:a7:d1:7e:08:1a:08:
84:65:c9:c1:94:22:0c:92:e2:ee:4e:d5:70:d7:e7:29:96:e7:
b3:be:58:55:e6:3a:1b:c6:66:f5:0c:55:86:6c:9c:1f:85:c1:
84:2c:c0:a3:5d:f9:2a:97:52:f6:6b:fe:41:5f:ce:82:d3:85:
75:40:1c:c5:cc:8b:81:2f:c2:0f:18:98:02:17:54:c8:17:7c:
72:84:71:d5:05:7d:ca:82:95:b8:3b:d8:32:0c:08:e2:87:84:
e6:78:7f:da:26:51:93:e2:ef:92:ee:88:73:ae:d5:2f:f1:29:
ff:f3:d2:4f:16:96:7d:c3:b6:ef:cb:e2:39:af:34:2f:ba:b9:
b7:3e:b2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:00:30 2025 by rpki-client