Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/353f8b3e-d000-3445-8659-f5bf019cb547.roa
File: 353f8b3e-d000-3445-8659-f5bf019cb547.roa (raw, json)
Hash identifier: iVJOZS2jyk/Nn/F7xSnPnidZkjfhGLW+KJw4vqoG5tM=
Subject key identifier: ED:D9:57:E9:76:35:76:7D:BC:AA:35:6A:2B:56:76:96:C9:00:0C:5C
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584875F05A59653516547340BC00
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/353f8b3e-d000-3445-8659-f5bf019cb547.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 4540
IP address blocks: 69.51.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:5a:59:65:35:16:54:73:40:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=3a536e7c-c6a3-4136-99f3-c37820676784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:5c:fa:0f:d4:31:8e:4f:2a:a5:89:33:ee:
33:80:7e:6c:38:7b:6f:37:24:e6:f0:ab:50:cd:a1:
29:0a:03:db:bd:a0:23:55:10:de:61:7a:3b:08:78:
ce:5f:47:8a:a4:ad:37:04:b5:12:87:f8:03:1f:c5:
d4:a3:19:97:c8:6b:34:3e:05:c8:f4:57:82:14:8a:
f4:13:d3:6e:9d:f5:65:99:c8:e0:6b:79:e7:17:a4:
9e:1d:f0:0e:3f:e9:2b:d8:ca:2d:93:b3:9d:fc:08:
9e:dc:e6:fc:f9:16:b0:69:5e:e7:50:76:88:65:26:
4b:3b:09:74:7b:b4:ec:68:3e:da:d2:ed:a9:65:bb:
2e:d6:53:33:5f:92:0b:7d:7a:3b:db:90:60:84:66:
fa:92:a6:89:07:78:ae:f7:19:f6:20:61:32:54:27:
cb:67:98:3d:b2:4f:a6:2e:9a:76:ec:77:13:10:64:
eb:72:b3:9a:1c:13:b6:c4:c3:f7:07:d8:69:45:5f:
cc:b9:6b:71:11:66:3f:26:a2:41:04:f6:ae:45:60:
2e:6e:ca:70:fe:1e:c9:88:6b:25:63:3a:ef:47:1e:
13:ff:a7:a8:48:7b:bd:df:bb:ca:99:05:21:00:fe:
0a:6a:c5:a2:09:ec:d9:c5:44:b7:ec:a2:74:2c:e2:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:57:E9:76:35:76:7D:BC:AA:35:6A:2B:56:76:96:C9:00:0C:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/353f8b3e-d000-3445-8659-f5bf019cb547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
69.51.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:8d:dd:b8:1a:c9:f4:fb:57:2e:1f:6b:86:9a:85:39:eb:60:
a5:d6:29:7c:38:93:95:bc:25:9f:40:7d:b9:60:39:16:f8:cf:
15:c9:9c:d8:74:9a:02:19:5d:7c:de:e4:75:5b:6d:77:9c:14:
22:81:87:31:02:aa:64:ce:a9:73:65:00:15:4e:93:ed:1d:d8:
69:2f:41:86:b7:b4:cd:d0:8b:fc:1f:eb:df:13:76:9c:25:cb:
6f:fd:c7:d9:e7:6b:3b:09:3c:a2:53:f0:84:a2:90:7d:84:b3:
c2:75:48:c6:f5:9b:a4:a2:1b:82:01:dd:ab:dc:fe:00:6e:ae:
ec:ca:c5:f0:aa:4c:44:6e:07:e7:05:a2:45:1c:8d:85:f5:e5:
8c:6e:75:d7:2a:a0:a8:7b:08:8b:06:10:2f:27:37:b2:6c:13:
14:c4:f3:4a:d3:dc:be:90:dc:ca:03:32:34:a3:66:7a:52:16:
94:65:25:b7:b9:16:07:99:a1:c2:3d:40:73:ed:94:6e:b7:b6:
c1:15:8e:ff:82:cb:17:13:73:d4:f1:76:9e:bb:57:16:f3:ec:
9b:29:9d:90:a1:bc:75:83:9e:e5:9f:6c:f6:a4:bf:50:b9:14:
89:57:ac:39:77:40:9f:39:c3:4e:4a:19:3e:7e:c3:99:ff:b5:
77:ec:0b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:03 2025 by rpki-client