Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa
File: 83a687bd-8f33-38a0-b954-7a7150c2e666.roa (raw, json)
Hash identifier: KgMR8/ozCz5ApBbiNCFnfKLLVNganbA+i5/8LSnFZ0k=
Subject key identifier: 86:18:2C:F6:8F:20:D6:F3:8A:97:45:48:49:4C:A8:24:D2:40:D5:F6
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858482A8FE1175EAD5A57AA623500
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 394437
IP address blocks: 209.173.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e1:17:5e:ad:5a:57:aa:62:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=9613b96b-0e3c-42c1-8a6a-9f04bd0b738a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:b9:81:03:d1:76:bc:42:41:49:0c:7b:72:
a7:d8:0c:4d:f2:04:42:fe:7d:b6:1e:42:ea:d9:6e:
cb:23:92:9b:42:af:23:ed:90:47:ce:3f:0e:6c:90:
27:10:22:a8:3c:ae:a8:df:4e:9d:e2:5f:eb:11:41:
b6:a9:6f:8d:28:a9:8d:06:22:42:92:93:48:15:dd:
3e:41:53:73:95:6f:53:07:72:5a:62:ae:bf:43:e3:
b1:e1:95:02:a5:a1:06:85:dc:c3:e0:b2:7a:8e:39:
b4:a2:9a:c1:ef:5f:61:f5:40:a5:fa:cb:76:a1:fd:
4f:55:09:53:f9:ab:57:de:30:a9:30:18:c8:a4:0b:
da:53:68:6b:eb:16:cc:de:b7:ce:b3:1a:5b:80:b0:
9f:c2:e6:13:fb:8e:42:ce:75:cd:98:01:fe:55:2b:
e7:b0:88:00:a0:93:d7:e0:f4:cc:4a:59:0c:6b:d7:
05:fa:c2:31:32:d7:74:88:1b:49:51:6f:3d:8a:68:
27:4d:7d:33:4f:aa:fa:41:db:9d:73:38:3f:19:ff:
09:10:6d:08:db:4a:0c:ba:ec:cc:6e:f2:b3:bd:5a:
11:8a:2e:ec:ba:e2:7c:ef:97:03:06:87:40:6f:ed:
fb:be:00:36:18:a3:51:4c:70:dd:22:6a:5e:bf:8d:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:18:2C:F6:8F:20:D6:F3:8A:97:45:48:49:4C:A8:24:D2:40:D5:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.173.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:4e:e3:0c:6f:b9:1b:0f:a2:51:17:a0:f8:ae:ce:27:ed:ff:
db:59:23:26:28:e0:0a:c7:65:23:54:04:8d:19:af:1d:b0:2f:
1a:8e:8f:57:ac:ea:5f:0c:a3:3a:db:19:c2:5a:fe:7d:f3:86:
4d:07:bd:29:7e:15:62:11:ab:8e:0c:f6:3a:a3:99:bd:71:10:
22:88:0c:1e:99:02:12:5f:0c:ed:fa:9a:00:8b:3d:cb:c2:69:
78:60:b4:2e:28:56:fe:e6:37:fe:0a:dd:fb:0d:55:85:87:c7:
af:83:98:7e:6a:05:58:79:52:a9:7f:3b:56:23:45:31:c4:18:
09:8d:f5:0e:12:6a:9d:79:ea:e1:9d:c3:f8:76:29:06:18:db:
d3:a4:6a:d3:25:0f:a2:2b:db:96:58:13:02:50:a2:f4:02:14:
8c:a3:b1:fd:1e:28:d9:57:d4:06:52:92:43:c3:f1:46:74:89:
05:55:e7:3e:fc:ef:af:77:75:20:d1:9c:e4:32:4b:94:7c:a7:
95:12:20:b1:c6:fc:0c:08:2e:f4:d4:68:fc:b6:90:38:93:e7:
cb:bc:ed:b4:e4:ea:b9:88:ea:cb:ac:c7:db:68:6f:44:4d:ea:
5c:d2:35:1d:32:9b:f8:9a:a6:c9:61:90:b7:73:cb:16:bc:48:
4e:8d:ab:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:44 2025 by rpki-client