Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b6ed2d7b-c2a3-3a4a-8f91-6b8e85382e4d.roa
File: b6ed2d7b-c2a3-3a4a-8f91-6b8e85382e4d.roa (raw, json)
Hash identifier: TT3fJp8hy9PPWlcSqc/MvJ8/+RJcOQPgXSGyuTv0viA=
Subject key identifier: C2:98:AE:A8:BC:57:AC:0C:8D:52:96:20:EA:C4:6D:56:8F:C1:3B:AE
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F432858485A057C704B9E5C318FAF3FC0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b6ed2d7b-c2a3-3a4a-8f91-6b8e85382e4d.roa
Signing time: Sat 28 Dec 2024 02:00:38 +0000
ROA not before: Sat 28 Dec 2024 02:00:38 +0000
ROA not after: Fri 28 Mar 2025 01:00:38 +0000
asID: 15164
IP address blocks: 209.71.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5a:05:7c:70:4b:9e:5c:31:8f:af:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Dec 28 02:00:38 2024 GMT
Not After : Mar 28 01:00:38 2025 GMT
Subject: CN=f6e8adfc-2209-4c68-a959-afe6d0d92232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:66:d9:15:dd:ea:41:ec:8c:05:f2:8e:77:
83:16:db:8e:6c:0b:af:fd:00:ab:2c:0b:cb:cf:2c:
ca:77:7a:46:76:0e:35:48:95:1b:5c:e2:92:83:b1:
d8:84:c0:8b:53:73:9b:72:57:8b:e0:b8:09:aa:ba:
33:f0:17:11:82:2e:ee:be:00:82:70:2c:dc:ec:0c:
93:d4:d7:b5:5d:93:81:97:c3:31:49:e8:6a:c3:ce:
3c:4e:ec:36:9f:77:a4:ab:2b:3b:49:86:41:b2:04:
14:dd:39:7b:f1:ec:4c:95:fc:09:58:a2:ba:d9:66:
74:e6:94:da:63:fc:62:05:b0:fb:b1:e6:10:6e:b2:
31:c3:ae:4a:92:65:0e:a1:dc:3d:31:06:f4:6f:4a:
e6:eb:02:aa:f0:4c:a6:d3:15:7e:39:85:f6:1b:c3:
c4:34:0d:69:3c:35:c7:9e:ab:69:bd:fa:af:28:3c:
08:27:5b:bb:54:ec:7e:33:ec:dd:47:cf:a2:d7:64:
00:7c:98:7d:fd:7f:9b:39:bb:5c:a0:55:53:7c:ae:
62:f4:16:f9:4c:f4:26:78:28:1e:68:b0:bd:a3:fb:
93:eb:29:56:70:12:74:2f:78:f5:42:e8:11:e9:c0:
a1:47:fb:e0:19:73:03:e3:5b:d4:9f:7a:24:7f:9b:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:98:AE:A8:BC:57:AC:0C:8D:52:96:20:EA:C4:6D:56:8F:C1:3B:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b6ed2d7b-c2a3-3a4a-8f91-6b8e85382e4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
209.71.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:b7:7a:cf:38:3a:89:0a:2e:84:e0:43:09:61:ef:0a:6c:cc:
93:18:cf:03:68:57:7e:f4:23:ed:14:62:60:a0:d4:08:54:00:
48:00:10:62:0b:ba:36:8f:f6:1d:36:c0:c2:54:1d:8e:43:84:
ca:0c:83:e1:ff:70:83:0a:21:06:10:82:6e:6f:11:38:95:d5:
c7:a2:9b:97:8e:8f:6f:50:bc:f2:1b:1f:da:d7:a9:d5:fc:e4:
c9:25:4f:f7:69:f8:2b:7a:ec:24:69:25:18:c2:1e:f5:54:2b:
d3:62:81:60:7d:ae:b8:02:19:e7:76:88:c4:06:b7:cd:cd:63:
e8:6f:0c:e1:ad:1f:d9:33:fb:17:23:81:13:b0:d6:71:8c:37:
3f:b9:1f:9c:fc:aa:2c:42:d9:40:d0:eb:18:6c:1f:9b:cc:84:
a2:27:fe:27:64:46:5b:c1:4f:a1:1f:ab:7c:cc:de:6e:ca:e5:
19:54:ea:21:b6:05:08:99:2d:39:57:d8:04:4e:eb:a3:54:8d:
7d:61:7c:81:03:ba:f7:68:ea:ab:c0:4b:ff:ad:fb:d9:85:2e:
db:fb:c5:16:c5:f0:b3:14:6f:b2:bf:0d:3c:d5:3a:c2:0a:40:
04:b5:7e:51:2e:9c:bc:e9:08:a0:e9:04:8a:68:e6:13:75:83:
1a:18:88:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:16 2025 by rpki-client