Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/00a41180-d3f2-3de7-be7a-c91f3d2692ee.roa
File: 00a41180-d3f2-3de7-be7a-c91f3d2692ee.roa (raw, json)
Hash identifier: R3CWmskZXky2LE91yqmoq+1KCDGGRm6XY4M6kK5lbRk=
Subject key identifier: 6A:7B:4B:53:05:B1:87:8E:E9:E8:01:75:B5:AC:3F:01:9D:9B:BD:11
Certificate issuer: /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial: 010D0C9F4328584800AF7C85265EC781ADB0F7C0
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/00a41180-d3f2-3de7-be7a-c91f3d2692ee.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 397041
IP address blocks: 209.59.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:7c:85:26:5e:c7:81:ad:b0:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=0d62c2a7-6276-4561-b2a9-f21fa086cff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:d3:95:7e:71:d1:f6:81:ba:5e:fe:50:5c:
15:77:67:b2:b3:36:20:aa:a1:ee:21:2b:7a:cd:65:
c4:eb:93:85:81:98:e2:d4:aa:91:9d:cd:4c:58:08:
41:e6:53:8f:85:70:cd:1d:9c:68:73:e1:1d:23:8d:
bd:bc:1f:73:8a:1b:46:27:ec:a1:57:28:05:e7:1b:
3b:fa:32:fb:c1:9f:ea:c6:70:cc:22:73:e6:20:ee:
de:b5:c8:1a:1d:b3:58:00:fd:4c:33:52:78:d8:5d:
04:97:67:59:36:11:80:80:20:b8:ab:58:1b:97:42:
19:1b:08:0a:fa:84:ed:4b:c4:7b:d4:50:ef:3d:45:
dc:f5:3c:76:cc:1f:6c:20:6b:67:19:13:59:7c:cf:
60:f6:6b:a7:4d:17:0e:41:b4:3d:7f:ff:67:b6:d6:
77:72:dc:9f:fe:05:b9:80:de:d3:cd:f2:ba:a8:67:
87:23:21:f5:b2:e7:62:77:ce:08:3a:71:99:6e:23:
0c:fa:3f:16:a0:46:c9:fa:93:bc:34:c0:d5:d3:c1:
66:da:25:fe:c1:a8:7b:c0:2b:4a:aa:e4:b6:bd:20:
28:54:7d:07:8f:83:9d:c4:4a:99:9f:b1:80:62:0e:
02:a2:e9:cb:82:5c:58:53:53:84:1f:5b:ed:09:1d:
74:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7B:4B:53:05:B1:87:8E:E9:E8:01:75:B5:AC:3F:01:9D:9B:BD:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/00a41180-d3f2-3de7-be7a-c91f3d2692ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
X509v3 Authority Key Identifier:
keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
sbgp-ipAddrBlock: critical
IPv4:
209.59.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:81:57:d6:ac:94:b0:0a:2d:6f:ca:0d:45:57:34:83:7b:a5:
d9:98:df:2d:1b:62:f2:2f:30:53:d6:d7:45:75:80:d8:01:d3:
b1:48:04:50:35:59:8f:ad:ac:a7:00:31:9a:2a:5f:9e:a2:bc:
09:b3:64:4d:95:fc:5b:f0:18:be:77:46:b9:f4:1f:82:e0:2d:
ec:d0:37:4b:0e:b3:ed:f7:76:7f:50:ee:8c:5d:11:a6:01:58:
a1:32:95:9c:07:5a:62:d8:07:3d:72:fa:0e:bd:c7:97:dc:fc:
3d:bc:f0:e0:3d:04:5c:eb:16:91:19:d0:23:2b:5c:94:05:ae:
d3:e1:39:f8:27:4a:6d:42:20:c1:cc:5a:a4:7c:1b:7f:11:99:
77:46:1a:ef:96:7d:1f:75:fb:2c:14:ad:2a:10:6d:72:ac:ce:
53:3a:6c:04:ef:ff:94:3f:fc:7d:ab:55:49:84:2d:9a:48:0c:
d3:0b:64:9b:f0:d2:b8:86:33:54:37:f2:54:f4:5f:dc:29:18:
9c:f4:b9:84:3b:52:ff:47:79:6e:24:80:1c:1b:bd:43:cb:1e:
d1:c5:d5:46:1d:8f:a6:3d:a8:1b:58:1a:52:d3:09:3a:2a:42:
cd:30:74:ab:8f:f6:ac:4e:97:36:c8:21:0c:c9:33:da:40:f6:
29:6b:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:35 2025 by rpki-client