Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa
File: 7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa (raw, json)
Hash identifier: ElyhmQk2+4G9cjmqmS8HK2ltJNXRUGGuIP5ba1MZfYI=
Subject key identifier: E9:4C:E4:45:31:A2:7F:DF:9E:94:5A:11:D5:78:DC:93:FB:29:FE:78
Certificate issuer: /CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
Certificate serial: 010D0C9F43285848467AC0475C72CE710E0A1680
Authority key identifier: 0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 396982
IP address blocks: 209.240.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:c0:47:5c:72:ce:71:0e:0a:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc881f-54ac-40a9-89b3-5383cf243bae
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=0d80bace-08a2-4102-8a39-88773ff2d3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:d0:ff:84:9b:33:47:d5:1f:cd:c5:f5:9a:
fe:39:8e:18:38:28:b3:a1:77:7e:45:34:1e:e0:e2:
1f:17:80:95:ac:61:8a:3c:0a:56:df:52:79:16:51:
2e:89:c0:26:d3:07:54:b8:89:02:36:b5:5f:ab:71:
ce:f7:8d:2b:37:5b:15:87:6c:5a:d7:0b:47:e8:22:
92:6a:24:75:9d:a1:aa:32:0d:49:02:97:b0:bb:83:
46:e5:41:e2:59:96:c8:51:07:94:45:71:eb:b5:bb:
e3:34:c8:b0:25:f0:89:ab:f7:5f:c0:02:7f:d7:28:
8a:92:34:1e:d3:c9:9f:65:2a:4a:60:64:8c:cd:14:
c1:87:9d:d4:82:9c:92:23:1b:8c:d5:ca:0c:33:32:
87:58:e9:7a:73:03:23:72:32:97:16:fa:c8:62:b0:
6b:03:9d:92:03:3b:aa:2d:d3:aa:aa:4f:9c:93:90:
50:9b:55:ea:0c:a7:42:fb:10:1a:ca:f7:7a:34:77:
c0:29:ce:85:eb:18:5b:c0:16:25:8e:65:f0:44:03:
24:52:32:47:a3:9d:01:85:06:80:00:61:1d:94:e9:
db:95:a1:25:60:f1:08:c6:92:c7:18:88:83:d9:7a:
cf:7c:22:84:19:ee:70:0a:e3:c6:cc:4c:02:d1:36:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4C:E4:45:31:A2:7F:DF:9E:94:5A:11:D5:78:DC:93:FB:29:FE:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl
X509v3 Authority Key Identifier:
keyid:0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer
sbgp-ipAddrBlock: critical
IPv4:
209.240.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:6f:f9:e9:8b:6f:b5:86:44:f6:c3:14:d6:93:4d:4b:af:58:
1d:8a:fa:70:aa:17:12:bf:eb:c5:4b:87:b6:88:e3:e5:07:db:
eb:35:73:79:de:5f:a2:40:dc:e9:68:76:21:2f:f9:7d:af:81:
0b:a5:9f:23:97:ec:ff:15:75:79:1e:16:18:5b:4b:51:ff:57:
41:01:92:30:48:0c:5c:38:08:61:b3:a7:e9:1c:74:f8:e4:37:
6a:c6:c8:d9:02:83:13:d9:53:ad:bd:37:c2:6f:f1:2d:fa:60:
f1:f8:4c:68:68:9e:39:b4:65:2c:89:b2:7a:29:f5:e7:72:09:
f2:1b:be:dd:93:df:c4:76:51:75:18:79:e6:c3:85:2a:f0:81:
96:a1:48:4f:39:27:fb:f2:02:87:47:0e:f9:bf:9f:69:f1:d1:
75:10:41:43:a9:a0:2f:b1:48:41:80:2c:7d:e6:03:4e:40:16:
38:91:dd:e4:3e:9e:8a:35:d8:06:ff:d0:ff:72:31:68:b3:4a:
00:f5:c3:43:63:a7:96:75:9d:27:84:63:47:48:80:e4:79:09:
e3:03:2b:19:f0:6d:9e:09:9d:c9:78:5e:0b:91:6d:61:e6:a5:
ed:82:e9:02:49:9a:2f:f4:e3:d6:9f:e1:be:0c:82:96:a7:fa:
2a:c0:0d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:39:33 2025 by rpki-client